CVE List

Id CVE No. Status Description Phase Votes Comments Actions
9991  CVE-2004-1563  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web script or HTML via the (1) thread parameter to download_thread.php, (2) loginuser parameter to login.php, or (3) userid parameter to forgot_password.php.  Assigned (20050220)  None (candidate not yet proposed)    View
75527  CVE-2014-8226  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20141010)  None (candidate not yet proposed)    View
10247  CVE-2004-1820  Candidate  PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on a remote web server that contains fileFunctions.php.  Assigned (20050504)  None (candidate not yet proposed)    View
75783  CVE-2014-8482  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20141024)  None (candidate not yet proposed)    View
10503  CVE-2004-2077  Candidate  Nadeo Game Engine for Nadeo TrackMania and Nadeo Virtual Skipper 3 allows remote attackers to cause a denial of service (server crash) via malformed data to TCP port 2350, possibly due to long values or incorrect size fields.  Assigned (20050519)  None (candidate not yet proposed)    View

Page 574 of 20943, showing 5 records out of 104715 total, starting on record 2866, ending on 2870

Actions