CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
79363 | CVE-2015-2086 | Candidate | Cross-site scripting (XSS) vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title. | Assigned (20150226) | None (candidate not yet proposed) | View | |
14083 | CVE-2005-2877 | Candidate | The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers. | Assigned (20050913) | None (candidate not yet proposed) | View | |
79619 | CVE-2015-2342 | Candidate | The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol. | Assigned (20150318) | None (candidate not yet proposed) | View | |
14339 | CVE-2005-3133 | Candidate | Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to (1) delete arbitrary files or directories via a relative path to the id parameter to logout.html or (2) include arbitrary PHP files or other files via the helpid parameter to help.html. | Assigned (20051004) | None (candidate not yet proposed) | View | |
79875 | CVE-2015-2598 | Candidate | Unspecified vulnerability in the mobile app in Oracle Business Intelligence Enterprise Edition in Oracle Fusion Middleware before 11.1.1.7.0 (11.6.39) allows remote authenticated users to affect integrity via unknown vectors related to Mobile - iPad. | Assigned (20150320) | None (candidate not yet proposed) | View |
Page 264 of 20943, showing 5 records out of 104715 total, starting on record 1316, ending on 1320