CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 22527 | CVE-2006-6423 | Candidate | Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix. | Assigned (20061209) | None (candidate not yet proposed) | View | |
| 88063 | CVE-2016-1244 | Candidate | The extractTree function in unADF allows remote attackers to execute arbitrary code via shell metacharacters in a directory name in an adf file. | Assigned (20151227) | None (candidate not yet proposed) | View | |
| 22783 | CVE-2006-6679 | Candidate | Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client"s status on an IP address ACL, which allows remote attackers to gain unauthorized access by spoofing this header. | Assigned (20061221) | None (candidate not yet proposed) | View | |
| 88319 | CVE-2016-1500 | Candidate | ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2, when the "file_versions" application is enabled, does not properly check the return value of getOwner, which allows remote authenticated users to read the files with names starting with ".v" and belonging to a sharing user by leveraging an incoming share. | Assigned (20160106) | None (candidate not yet proposed) | View | |
| 23039 | CVE-2006-6935 | Candidate | SQL injection vulnerability in the login component in Portix-PHP 0.4.2 allows remote attackers to execute arbitrary SQL commands via the username and passwd (password) fields. | Assigned (20070116) | None (candidate not yet proposed) | View |
Page 20897 of 20943, showing 5 records out of 104715 total, starting on record 104481, ending on 104485
