CVE List

Id CVE No. Status Description Phase Votes Comments Actions
81918  CVE-2015-4641  Candidate  Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices allows remote web servers to write to arbitrary files, and consequently execute arbitrary code in a privileged context, by leveraging control of the skslm.swiftkey.net domain name and providing a .. (dot dot) in an entry in a ZIP archive, as demonstrated by a traversal to the /data/dalvik-cache directory.  Assigned (20150617)  None (candidate not yet proposed)    View
16638  CVE-2006-0534  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attackers to inject arbitrary web script or HTML via the (1) ortak or (2) kat parameter.  Assigned (20060203)  None (candidate not yet proposed)    View
82174  CVE-2015-4897  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20150624)  None (candidate not yet proposed)    View
16894  CVE-2006-0790  Candidate  Rockliffe MailSite 7.0 and earlier allows remote attackers to cause a denial of service by sending crafted LDAP packets to port 389/TCP, as demonstrated by the ProtoVer LDAP testsuite.  Assigned (20060219)  None (candidate not yet proposed)    View
82430  CVE-2015-5153  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20150701)  None (candidate not yet proposed)    View

Page 20807 of 20943, showing 5 records out of 104715 total, starting on record 104031, ending on 104035

Actions