CVE List

Id CVE No. Status Description Phase Votes Comments Actions
37124  CVE-2008-7007  Candidate  Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and gain administrative access by setting the (1) admin_name and (2) admin_pass cookie values to 1.  Assigned (20090818)  None (candidate not yet proposed)    View
102660  CVE-2017-5840  Candidate  The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving the current stts index.  Assigned (20170201)  None (candidate not yet proposed)    View
37380  CVE-2008-7263  Candidate  ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.  Assigned (20101019)  None (candidate not yet proposed)    View
102916  CVE-2017-6096  Candidate  A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lists/view-list.php (Requires authentication to Wordpress admin) with the GET Parameter: filter_list.  Assigned (20170218)  None (candidate not yet proposed)    View
37636  CVE-2009-0201  Candidate  Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word document, related to "table parsing."  Assigned (20090120)  None (candidate not yet proposed)    View

Page 376 of 20943, showing 5 records out of 104715 total, starting on record 1876, ending on 1880

Actions