CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
63484 | CVE-2013-3537 | Candidate | Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id_post or (2) pg parameter. | Assigned (20130513) | None (candidate not yet proposed) | View | |
63740 | CVE-2013-3793 | Candidate | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language. | Assigned (20130603) | None (candidate not yet proposed) | View | |
63996 | CVE-2013-4049 | Candidate | Unrestricted file upload vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to execute arbitrary code by uploading and accessing a JSP file. | Assigned (20130607) | None (candidate not yet proposed) | View | |
64252 | CVE-2013-4305 | Candidate | Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. | Assigned (20130612) | None (candidate not yet proposed) | View | |
64508 | CVE-2013-4561 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20130612) | None (candidate not yet proposed) | View |
Page 20701 of 20943, showing 5 records out of 104715 total, starting on record 103501, ending on 103505