CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
14336 | CVE-2005-3130 | Candidate | SQL injection vulnerability in lucidCMS 1.0.11 allows remote attackers to execute arbitrary SQL commands via the login field. | Assigned (20051004) | None (candidate not yet proposed) | View | |
79872 | CVE-2015-2595 | Candidate | Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. | Assigned (20150320) | None (candidate not yet proposed) | View | |
14592 | CVE-2005-3386 | Candidate | SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp. | Assigned (20051029) | None (candidate not yet proposed) | View | |
80128 | CVE-2015-2851 | Candidate | client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename. | Assigned (20150403) | None (candidate not yet proposed) | View | |
14848 | CVE-2005-3644 | Candidate | PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and a different vulnerability than CVE-2005-2120. | Assigned (20051117) | None (candidate not yet proposed) | View |
Page 22 of 20943, showing 5 records out of 104715 total, starting on record 106, ending on 110