CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
13315 | CVE-2005-2109 | Candidate | wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use. | Assigned (20050701) | None (candidate not yet proposed) | View | |
78851 | CVE-2015-1574 | Candidate | The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service (persistent application crash) via a "Content-Disposition: ;" header in an e-mail message. | Assigned (20150211) | None (candidate not yet proposed) | View | |
13571 | CVE-2005-2365 | Candidate | Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer overflow or a denial of service (memory consumption) via unknown attack vectors. | Assigned (20050726) | None (candidate not yet proposed) | View | |
79107 | CVE-2015-1830 | Candidate | Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors. | Assigned (20150217) | None (candidate not yet proposed) | View | |
13827 | CVE-2005-2621 | Candidate | index.php in ECW-Shop 6.0.2 allows remote attackers to obtain sensitive information via the (1) min or (2) max parameter with a """ (single quote), which reveals the path in an error message, possibly due to a SQL injection vulnerability. | Assigned (20050819) | None (candidate not yet proposed) | View |
Page 263 of 20943, showing 5 records out of 104715 total, starting on record 1311, ending on 1315