CVE List

Id CVE No. Status Description Phase Votes Comments Actions
11517  CVE-2005-0311  Candidate  Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables that user from a resource, which could allow remote authenticated users to retain unauthorized access to resources.  Assigned (20050210)  None (candidate not yet proposed)    View
77053  CVE-2014-9752  Candidate  Unrestricted file upload vulnerability in mods/_core/properties/lib/course.inc.php in ATutor before 2.2 patch 6 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension as a customicon for a new course, then accessing it via a direct request to the file in content/.  Assigned (20151005)  None (candidate not yet proposed)    View
11773  CVE-2005-0567  Candidate  Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying the (1) theme parameter to phpmyadmin.css.php or (2) cfg[Server][extension] parameter to database_interface.lib.php to reference a URL on a remote web server that contains the code.  Assigned (20050227)  None (candidate not yet proposed)    View
77309  CVE-2015-0046  Candidate  Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0038 and CVE-2015-0042.  Assigned (20141118)  None (candidate not yet proposed)    View
12029  CVE-2005-0823  Candidate  ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges.  Assigned (20050320)  None (candidate not yet proposed)    View

Page 20719 of 20943, showing 5 records out of 104715 total, starting on record 103591, ending on 103595

Actions