CVE List

Id CVE No. Status Description Phase Votes Comments Actions
88068  CVE-2016-1249  Candidate  The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service (out-of-bounds read) via vectors involving an unaligned number of placeholders in WHERE condition and output fields in SELECT expression.  Assigned (20151227)  None (candidate not yet proposed)    View
22788  CVE-2006-6684  Candidate  Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd before 2.4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long X-Forwarded-For HTTP header. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.  Assigned (20061221)  None (candidate not yet proposed)    View
88324  CVE-2016-1505  Candidate  The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.  Assigned (20160107)  None (candidate not yet proposed)    View
23044  CVE-2006-6940  Candidate  Buffer overflow in the ParseHeader function in clsOWA.cls in POP3/SMTP to OWA (pop2owa) 1.1.3 allows remote attackers to execute arbitrary code via a long header in an e-mail message.  Assigned (20070116)  None (candidate not yet proposed)    View
88580  CVE-2016-1761  Candidate  libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.  Assigned (20160113)  None (candidate not yet proposed)    View

Page 358 of 20943, showing 5 records out of 104715 total, starting on record 1786, ending on 1790

Actions