CVE List

Id CVE No. Status Description Phase Votes Comments Actions
10758  CVE-2004-2332  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in CPAN WWW::Form before 1.13 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.  Assigned (20050816)  None (candidate not yet proposed)    View
76294  CVE-2014-8993  Candidate  Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev40, 7.6.0 before 7.6.0-rev32, and 7.6.1 before 7.6.1-rev11 allows remote attackers to inject arbitrary web script or HTML via a crafted XHTML file with the application/xhtml+xml MIME type.  Assigned (20141119)  None (candidate not yet proposed)    View
11014  CVE-2004-2588  Candidate  Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote attackers to obtain sensitive information such as the configuration of the web server and the PHP application.  Assigned (20051128)  None (candidate not yet proposed)    View
76550  CVE-2014-9249  Candidate  The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by connecting to unspecified open ports, aka ZEN-15408.  Assigned (20141203)  None (candidate not yet proposed)    View
11270  CVE-2005-0064  Candidate  Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.  Assigned (20050113)  None (candidate not yet proposed)    View

Page 500 of 20943, showing 5 records out of 104715 total, starting on record 2496, ending on 2500

Actions