CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
14333 | CVE-2005-3127 | Candidate | Cross-site scripting (XSS) vulnerability in index.php in lucidCMS 1.0.11 allows remote attackers to inject arbitrary web script or HTML via the query string. | Assigned (20051004) | None (candidate not yet proposed) | View | |
79869 | CVE-2015-2592 | Candidate | Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-2584. | Assigned (20150320) | None (candidate not yet proposed) | View | |
14589 | CVE-2005-3383 | Candidate | SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp. | Assigned (20051029) | None (candidate not yet proposed) | View | |
80125 | CVE-2015-2848 | Candidate | Cross-site request forgery (CSRF) vulnerability in Honeywell Tuxedo Touch before 5.2.19.0_VA allows remote attackers to hijack the authentication of arbitrary users for requests associated with home-automation commands, as demonstrated by a door-unlock command. | Assigned (20150403) | None (candidate not yet proposed) | View | |
14845 | CVE-2005-3641 | Candidate | Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username. | Assigned (20051116) | None (candidate not yet proposed) | View |
Page 20725 of 20943, showing 5 records out of 104715 total, starting on record 103621, ending on 103625