CVE List

Id CVE No. Status Description Phase Votes Comments Actions
88061  CVE-2016-1242  Candidate  file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.  Assigned (20151227)  None (candidate not yet proposed)    View
22781  CVE-2006-6677  Candidate  ESET NOD32 Antivirus before 1.1743 allows remote attackers to cause a denial of service (crash) via a crafted .CHM file that triggers a divide-by-zero error.  Assigned (20061220)  None (candidate not yet proposed)    View
88317  CVE-2016-1498  Candidate  Cross-site scripting (XSS) vulnerability in the OCS discovery provider component in ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a URL.  Assigned (20160106)  None (candidate not yet proposed)    View
23037  CVE-2006-6933  Candidate  Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as (1) ServerKey.pem and (2) AcceptIP.txt. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.  Assigned (20070116)  None (candidate not yet proposed)    View
88573  CVE-2016-1754  Candidate  The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1755.  Assigned (20160113)  None (candidate not yet proposed)    View

Page 20738 of 20943, showing 5 records out of 104715 total, starting on record 103686, ending on 103690

Actions