CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
78598 | CVE-2015-1321 | Candidate | Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted webpage. | Assigned (20150122) | None (candidate not yet proposed) | View | |
13318 | CVE-2005-2112 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) order parameter to edit.php or (2) cid parameter to comment_edit.php. | Assigned (20050701) | None (candidate not yet proposed) | View | |
78854 | CVE-2015-1577 | Candidate | Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to arbitrary files via a (1) .. (dot dot) or (2) full pathname in the f parameter. | Assigned (20150211) | None (candidate not yet proposed) | View | |
13574 | CVE-2005-2368 | Candidate | vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels. | Assigned (20050726) | None (candidate not yet proposed) | View | |
79110 | CVE-2015-1833 | Candidate | XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request. | Assigned (20150217) | None (candidate not yet proposed) | View |
Page 517 of 20943, showing 5 records out of 104715 total, starting on record 2581, ending on 2585