CVE List

Id CVE No. Status Description Phase Votes Comments Actions
94723  CVE-2016-7903  Candidate  Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header.  Assigned (20160909)  None (candidate not yet proposed)    View
29443  CVE-2007-6086  Candidate  Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the module parameter.  Assigned (20071121)  None (candidate not yet proposed)    View
94979  CVE-2016-8159  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20160909)  None (candidate not yet proposed)    View
29699  CVE-2007-6342  Candidate  SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSION_COOKIE_NAME (session ID) in a cookie.  Assigned (20071213)  None (candidate not yet proposed)    View
95235  CVE-2016-8415  Candidate  An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31750554. References: QC-CR#1079596.  Assigned (20161005)  None (candidate not yet proposed)    View

Page 288 of 20943, showing 5 records out of 104715 total, starting on record 1436, ending on 1440

Actions