CVE List

Id CVE No. Status Description Phase Votes Comments Actions
80132  CVE-2015-2855  Candidate  The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not set the secure flag for the administrator"s cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, a different vulnerability than CVE-2015-4138.  Assigned (20150403)  None (candidate not yet proposed)    View
14852  CVE-2005-3648  Candidate  Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.  Assigned (20051117)  None (candidate not yet proposed)    View
80388  CVE-2015-3111  Candidate  Heap-based buffer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors.  Assigned (20150409)  None (candidate not yet proposed)    View
15108  CVE-2005-3904  Candidate  Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.  Assigned (20051130)  None (candidate not yet proposed)    View
80644  CVE-2015-3367  Candidate  Multiple cross-site request forgery (CSRF) vulnerabilities in the Patterns module before 7.x-2.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) restore, (2) publish, or (3) unpublish a pattern via unspecified vectors.  Assigned (20150421)  None (candidate not yet proposed)    View

Page 341 of 20943, showing 5 records out of 104715 total, starting on record 1701, ending on 1705

Actions