CVE List

Id CVE No. Status Description Phase Votes Comments Actions
14333  CVE-2005-3127  Candidate  Cross-site scripting (XSS) vulnerability in index.php in lucidCMS 1.0.11 allows remote attackers to inject arbitrary web script or HTML via the query string.  Assigned (20051004)  None (candidate not yet proposed)    View
79869  CVE-2015-2592  Candidate  Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-2584.  Assigned (20150320)  None (candidate not yet proposed)    View
14589  CVE-2005-3383  Candidate  SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.  Assigned (20051029)  None (candidate not yet proposed)    View
80125  CVE-2015-2848  Candidate  Cross-site request forgery (CSRF) vulnerability in Honeywell Tuxedo Touch before 5.2.19.0_VA allows remote attackers to hijack the authentication of arbitrary users for requests associated with home-automation commands, as demonstrated by a door-unlock command.  Assigned (20150403)  None (candidate not yet proposed)    View
14845  CVE-2005-3641  Candidate  Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username.  Assigned (20051116)  None (candidate not yet proposed)    View

Page 20725 of 20943, showing 5 records out of 104715 total, starting on record 103621, ending on 103625

Actions