CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 90624 | CVE-2016-3805 | Candidate | The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28333002 and MediaTek internal bug ALPS02694412. | Assigned (20160330) | None (candidate not yet proposed) | View | |
| 25344 | CVE-2007-1987 | Candidate | ** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _plugin_file parameter to smarty/internals/core.load_pulgins.php or the (2) root_path parameter to index.php. NOTE: CVE disputes (1) because the inclusion occurs within a function that is not called during a direct request. CVE disputes (2) because root_path is defined in config.php before use. | Assigned (20070411) | None (candidate not yet proposed) | View | |
| 90880 | CVE-2016-4061 | Candidate | Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application crash) via a crafted content stream. | Assigned (20160422) | None (candidate not yet proposed) | View | |
| 25600 | CVE-2007-2243 | Candidate | OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a different response if the user account exists, a similar issue to CVE-2001-1483. | Assigned (20070425) | None (candidate not yet proposed) | View | |
| 91136 | CVE-2016-4317 | Candidate | Atlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page. | Assigned (20160427) | None (candidate not yet proposed) | View |
Page 38 of 20943, showing 5 records out of 104715 total, starting on record 186, ending on 190
