CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
76038 | CVE-2014-8737 | Candidate | Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot) or full path name in an archive to ar. | Assigned (20141113) | None (candidate not yet proposed) | View | |
10758 | CVE-2004-2332 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in CPAN WWW::Form before 1.13 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. | Assigned (20050816) | None (candidate not yet proposed) | View | |
76294 | CVE-2014-8993 | Candidate | Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev40, 7.6.0 before 7.6.0-rev32, and 7.6.1 before 7.6.1-rev11 allows remote attackers to inject arbitrary web script or HTML via a crafted XHTML file with the application/xhtml+xml MIME type. | Assigned (20141119) | None (candidate not yet proposed) | View | |
11014 | CVE-2004-2588 | Candidate | Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote attackers to obtain sensitive information such as the configuration of the web server and the PHP application. | Assigned (20051128) | None (candidate not yet proposed) | View | |
76550 | CVE-2014-9249 | Candidate | The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by connecting to unspecified open ports, aka ZEN-15408. | Assigned (20141203) | None (candidate not yet proposed) | View |
Page 513 of 20943, showing 5 records out of 104715 total, starting on record 2561, ending on 2565