CVE List

Id CVE No. Status Description Phase Votes Comments Actions
76280  CVE-2014-8979  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20141118)  None (candidate not yet proposed)    View
11000  CVE-2004-2574  Candidate  Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to inject arbitrary web script or HTML via the date parameter in a calendar.uicalendar.planner menuaction.  Assigned (20051128)  None (candidate not yet proposed)    View
76536  CVE-2014-9235  Candidate  Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) _action parameter to group.php or (2) user.php or the (3) location_id parameter to photos.php in php/.  Assigned (20141203)  None (candidate not yet proposed)    View
11256  CVE-2005-0050  Candidate  The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the "License Logging Service Vulnerability."  Assigned (20050111)  None (candidate not yet proposed)    View
76792  CVE-2014-9491  Candidate  The devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial of service (NULL pointer dereference and panic) via unspecified vectors.  Assigned (20150103)  None (candidate not yet proposed)    View

Page 20303 of 20943, showing 5 records out of 104715 total, starting on record 101511, ending on 101515

Actions