CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
11270 | CVE-2005-0064 | Candidate | Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value. | Assigned (20050113) | None (candidate not yet proposed) | View | |
76806 | CVE-2014-9505 | Candidate | Cross-site scripting (XSS) vulnerability in the School Administration module 7.x-1.x before 7.x-1.8 for Drupal allows remote authenticated users with permission to create or edit a class node to inject arbitrary web script or HTML via a node title. | Assigned (20150103) | None (candidate not yet proposed) | View | |
11526 | CVE-2005-0320 | Candidate | Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to login.html, (2) accountid parameter to accountsettings_add.html, or the (3) note, (4) title, and (5) location fields to calendar.html. | Assigned (20050210) | None (candidate not yet proposed) | View | |
77062 | CVE-2014-9761 | Candidate | Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function. | Assigned (20160119) | None (candidate not yet proposed) | View | |
11782 | CVE-2005-0576 | Candidate | Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows local users to modify or delete arbitrary files. | Assigned (20050227) | None (candidate not yet proposed) | View |
Page 514 of 20943, showing 5 records out of 104715 total, starting on record 2566, ending on 2570