CVE List

Id CVE No. Status Description Phase Votes Comments Actions
13571  CVE-2005-2365  Candidate  Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer overflow or a denial of service (memory consumption) via unknown attack vectors.  Assigned (20050726)  None (candidate not yet proposed)    View
79107  CVE-2015-1830  Candidate  Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.  Assigned (20150217)  None (candidate not yet proposed)    View
13827  CVE-2005-2621  Candidate  index.php in ECW-Shop 6.0.2 allows remote attackers to obtain sensitive information via the (1) min or (2) max parameter with a """ (single quote), which reveals the path in an error message, possibly due to a SQL injection vulnerability.  Assigned (20050819)  None (candidate not yet proposed)    View
79363  CVE-2015-2086  Candidate  Cross-site scripting (XSS) vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title.  Assigned (20150226)  None (candidate not yet proposed)    View
14083  CVE-2005-2877  Candidate  The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.  Assigned (20050913)  None (candidate not yet proposed)    View

Page 286 of 20943, showing 5 records out of 104715 total, starting on record 1426, ending on 1430

Actions