CVE List

Id CVE No. Status Description Phase Votes Comments Actions
26118  CVE-2007-2761  Candidate  Stack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to execute arbitrary code via a long filename in a .cue file.  Assigned (20070518)  None (candidate not yet proposed)    View
91654  CVE-2016-4835  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20160517)  None (candidate not yet proposed)    View
26374  CVE-2007-3017  Candidate  The WYSIWYG editor applet in activeWeb contentserver CMS before 5.6.2964 only filters malicious tags from articles sent to admin/applets/wysiwyg/rendereditor.asp, which allows remote authenticated users to inject arbitrary JavaScript via a request to admin/worklist/worklist_edit.asp.  Assigned (20070604)  None (candidate not yet proposed)    View
91910  CVE-2016-5091  Candidate  Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and 8.1.1 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted Extbase action.  Assigned (20160526)  None (candidate not yet proposed)    View
26630  CVE-2007-3273  Candidate  SQL injection vulnerability in index.cfm in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  Assigned (20070619)  None (candidate not yet proposed)    View

Page 524 of 20943, showing 5 records out of 104715 total, starting on record 2616, ending on 2620

Actions