CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 84488 | CVE-2015-7211 | Candidate | Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors. | Assigned (20150916) | None (candidate not yet proposed) | View | |
| 19208 | CVE-2006-3104 | Candidate | users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sort_mode parameter, which reveals the installation path and database information in the resultant error message. | Assigned (20060620) | None (candidate not yet proposed) | View | |
| 84744 | CVE-2015-7467 | Candidate | Cross-site scripting (XSS) vulnerability in Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. | Assigned (20150929) | None (candidate not yet proposed) | View | |
| 19464 | CVE-2006-3360 | Candidate | Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists. | Assigned (20060706) | None (candidate not yet proposed) | View | |
| 85000 | CVE-2015-7723 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20151006) | None (candidate not yet proposed) | View |
Page 668 of 20943, showing 5 records out of 104715 total, starting on record 3336, ending on 3340
