CVE List

Id CVE No. Status Description Phase Votes Comments Actions
36862  CVE-2008-6745  Candidate  index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action.  Assigned (20090423)  None (candidate not yet proposed)    View
102398  CVE-2017-5578  Candidate  Memory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.  Assigned (20170125)  None (candidate not yet proposed)    View
37118  CVE-2008-7001  Candidate  Unrestricted file upload vulnerability in the file manager in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary code via unknown vectors.  Assigned (20090817)  None (candidate not yet proposed)    View
102654  CVE-2017-5834  Candidate  The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.  Assigned (20170201)  None (candidate not yet proposed)    View
37374  CVE-2008-7257  Candidate  CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary HTTP headers as demonstrated by a redirect attack involving a %0d%0aLocation%3a sequence in a URI, or conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCsr09163.  Assigned (20100622)  None (candidate not yet proposed)    View

Page 20806 of 20943, showing 5 records out of 104715 total, starting on record 104026, ending on 104030

Actions