CVE List

Id CVE No. Status Description Phase Votes Comments Actions
30716  CVE-2008-0599  Candidate  The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.  Assigned (20080205)  None (candidate not yet proposed)    View
96252  CVE-2016-9432  Candidate  An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (memory corruption, segmentation fault, and crash) via a crafted HTML page.  Assigned (20161118)  None (candidate not yet proposed)    View
30972  CVE-2008-0855  Candidate  SQL injection vulnerability in the Facile Forms (com_facileforms) component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.  Assigned (20080220)  None (candidate not yet proposed)    View
96508  CVE-2016-9688  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20161130)  None (candidate not yet proposed)    View
31228  CVE-2008-1111  Candidate  mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information.  Assigned (20080302)  None (candidate not yet proposed)    View

Page 20642 of 20943, showing 5 records out of 104715 total, starting on record 103206, ending on 103210

Actions