CVE List

Id CVE No. Status Description Phase Votes Comments Actions
82685  CVE-2015-5408  Candidate  HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Performance Audit 2.0 and 2.1; CentralView Credit Risk Control 2.1, 2.2, and 2.3; CentralView Roaming Fraud Control 2.1, 2.2, and 2.3; and CentralView Subscription Fraud Prevention 2.0 and 2.1 allow remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2015-5406 and CVE-2015-5407.  Assigned (20150707)  None (candidate not yet proposed)    View
17405  CVE-2006-1301  Candidate  Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302.  Assigned (20060320)  None (candidate not yet proposed)    View
82941  CVE-2015-5664  Candidate  Cross-site scripting (XSS) vulnerability in File Station in QNAP QTS before 4.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  Assigned (20150724)  None (candidate not yet proposed)    View
17661  CVE-2006-1557  Candidate  Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute arbitrary SQL commands via the (1) from and (2) into parameters in a calculate action, and the (3) id parameter in an edit action to index.php.  Assigned (20060331)  None (candidate not yet proposed)    View
83197  CVE-2015-5920  Candidate  The Software Update component in Apple iTunes before 12.3 does not properly handle redirection, which allows man-in-the-middle attackers to discover encrypted SMB credentials via unspecified vectors.  Assigned (20150806)  None (candidate not yet proposed)    View

Page 20728 of 20943, showing 5 records out of 104715 total, starting on record 103636, ending on 103640

Actions