CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
15111 | CVE-2005-3907 | Candidate | Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets. | Assigned (20051130) | None (candidate not yet proposed) | View | |
80647 | CVE-2015-3370 | Candidate | Cross-site request forgery (CSRF) vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote attackers to hijack the authentication of users with the "node_invite_can_manage_invite" permission for requests that re-enable node invitations via unspecified vectors. | Assigned (20150421) | None (candidate not yet proposed) | View | |
15367 | CVE-2005-4163 | Candidate | Directory traversal vulnerability in captcha.php in Captcha PHP 0.9 allows remote attackers to read arbitrary files via the _tcf parameter. | Assigned (20051211) | None (candidate not yet proposed) | View | |
80903 | CVE-2015-3626 | Candidate | Cross-site scripting (XSS) vulnerability in the DHCP Monitor page in the Web User Interface (WebUI) in Fortinet FortiOS before 5.2.4 on FortiGate devices allows remote attackers to inject arbitrary web script or HTML via a crafted hostname. | Assigned (20150430) | None (candidate not yet proposed) | View | |
15623 | CVE-2005-4419 | Candidate | Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) series, (2) cat_parent, (3) cat, and (4) div parameters. | Assigned (20051220) | None (candidate not yet proposed) | View |
Page 587 of 20943, showing 5 records out of 104715 total, starting on record 2931, ending on 2935