CVE List

Id CVE No. Status Description Phase Votes Comments Actions
12804  CVE-2005-1598  Candidate  SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable.  Assigned (20050516)  None (candidate not yet proposed)    View
78340  CVE-2015-1063  Candidate  CoreTelephony in Apple iOS before 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a Class 0 SMS message.  Assigned (20150116)  None (candidate not yet proposed)    View
13060  CVE-2005-1854  Candidate  Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to execute arbitrary commands on the caching server.  Assigned (20050606)  None (candidate not yet proposed)    View
78596  CVE-2015-1319  Candidate  The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a USB thumb drive.  Assigned (20150122)  None (candidate not yet proposed)    View
13316  CVE-2005-2110  Candidate  WordPress 1.5.1.2 and earlier allows remote attackers to obtain sensitive information via (1) a direct request to menu-header.php or a "1" value in the feed parameter to (2) wp-atom.php, (3) wp-rss.php, or (4) wp-rss2.php, which reveal the path in an error message. NOTE: vector [1] was later reported to also affect WordPress 2.0.1.  Assigned (20050701)  None (candidate not yet proposed)    View

Page 338 of 20943, showing 5 records out of 104715 total, starting on record 1686, ending on 1690

Actions