CVE List

Id CVE No. Status Description Phase Votes Comments Actions
103315  CVE-2017-6495  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170305)  None (candidate not yet proposed)    View
103314  CVE-2017-6494  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170305)  None (candidate not yet proposed)    View
103313  CVE-2017-6493  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170305)  None (candidate not yet proposed)    View
103312  CVE-2017-6492  Candidate  SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5. The POST parameter dat_cat_id is concatenated into a SQL query without any input validation/sanitization.  Assigned (20170305)  None (candidate not yet proposed)    View
103311  CVE-2017-6491  Candidate  Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (tooltip_id, callback, args, cid) passed to the EPESI-master/modules/Utils/Tooltip/req.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.  Assigned (20170305)  None (candidate not yet proposed)    View

Page 281 of 20943, showing 5 records out of 104715 total, starting on record 1401, ending on 1405

Actions