CVE List

Id CVE No. Status Description Phase Votes Comments Actions
79363  CVE-2015-2086  Candidate  Cross-site scripting (XSS) vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title.  Assigned (20150226)  None (candidate not yet proposed)    View
14083  CVE-2005-2877  Candidate  The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.  Assigned (20050913)  None (candidate not yet proposed)    View
79619  CVE-2015-2342  Candidate  The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.  Assigned (20150318)  None (candidate not yet proposed)    View
14339  CVE-2005-3133  Candidate  Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to (1) delete arbitrary files or directories via a relative path to the id parameter to logout.html or (2) include arbitrary PHP files or other files via the helpid parameter to help.html.  Assigned (20051004)  None (candidate not yet proposed)    View
79875  CVE-2015-2598  Candidate  Unspecified vulnerability in the mobile app in Oracle Business Intelligence Enterprise Edition in Oracle Fusion Middleware before 11.1.1.7.0 (11.6.39) allows remote authenticated users to affect integrity via unknown vectors related to Mobile - iPad.  Assigned (20150320)  None (candidate not yet proposed)    View

Page 264 of 20943, showing 5 records out of 104715 total, starting on record 1316, ending on 1320

Actions