CVE List

Id CVE No. Status Description Phase Votes Comments Actions
9990  CVE-2004-1562  Candidate  SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL commands via the key parameter.  Assigned (20050220)  None (candidate not yet proposed)    View
75526  CVE-2014-8225  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20141010)  None (candidate not yet proposed)    View
10246  CVE-2004-1819  Candidate  4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive information via a direct request to displaycategory.php, which reveals the path in an error message.  Assigned (20050504)  None (candidate not yet proposed)    View
75782  CVE-2014-8481  Candidate  The instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before 3.18-rc2 does not properly handle invalid instructions, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via a crafted application that triggers (1) an improperly fetched instruction or (2) an instruction that occupies too many bytes. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8480.  Assigned (20141024)  None (candidate not yet proposed)    View
10502  CVE-2004-2076  Candidate  Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the query parameter.  Assigned (20050519)  None (candidate not yet proposed)    View

Page 512 of 20943, showing 5 records out of 104715 total, starting on record 2556, ending on 2560

Actions