CVE List

Id CVE No. Status Description Phase Votes Comments Actions
19718  CVE-2006-3614  Candidate  index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error via the page_name parameter, possibly due to a SQL injection vulnerability.  Assigned (20060714)  None (candidate not yet proposed)    View
85254  CVE-2015-7977  Candidate  ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.  Assigned (20151023)  None (candidate not yet proposed)    View
19974  CVE-2006-3870  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20060726)  None (candidate not yet proposed)    View
85510  CVE-2015-8233  Candidate  Cross-site scripting (XSS) vulnerability in the MAYO theme 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.6 for Drupal allows remote administrators with the "Administer themes" permission to inject arbitrary web script or HTML via unspecified vectors related to theme settings.  Assigned (20151117)  None (candidate not yet proposed)    View
20230  CVE-2006-4126  Candidate  The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of service (application crash) by sending a client message before providing the nickname, which triggers a null pointer dereference.  Assigned (20060814)  None (candidate not yet proposed)    View

Page 514 of 20943, showing 5 records out of 104715 total, starting on record 2566, ending on 2570

Actions