CVE List

Id CVE No. Status Description Phase Votes Comments Actions
95493  CVE-2016-8673  Candidate  Cross-site request forgery (CSRF) vulnerability in the integrated web server on Siemens SIMATIC CP 343-1 Advanced prior to version 3.0.53, SIMATIC CP 443-1 Advanced prior to version 3.2.17, SIMATIC S7-300 CPU, and SIMATIC S7-400 CPU devices allows remote attackers to hijack the authentication of arbitrary users.  Assigned (20161015)  None (candidate not yet proposed)    View
30213  CVE-2008-0096  Candidate  Multiple buffer overflows in Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 and earlier allow remote attackers to execute arbitrary code via a (1) a long username, which triggers an overflow in the log function; or (2) a long password.  Assigned (20080107)  None (candidate not yet proposed)    View
95749  CVE-2016-8929  Candidate  IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.  Assigned (20161025)  None (candidate not yet proposed)    View
30469  CVE-2008-0352  Candidate  The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv6 packet, possibly involving the Jumbo Payload hop-by-hop option (jumbogram).  Assigned (20080117)  None (candidate not yet proposed)    View
96005  CVE-2016-9185  Candidate  In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration. Affected versions are <=5.0.3, >=6.0.0 <=6.1.0, and ==7.0.0.  Assigned (20161104)  None (candidate not yet proposed)    View

Page 445 of 20943, showing 5 records out of 104715 total, starting on record 2221, ending on 2225

Actions