CVE List

Id CVE No. Status Description Phase Votes Comments Actions
47368  CVE-2010-4784  Candidate  Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.  Assigned (20110407)  None (candidate not yet proposed)    View
47624  CVE-2010-5040  Candidate  PHP remote file inclusion vulnerability in nucleus/plugins/NP_gallery.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary PHP code via a URL in the DIR_NUCLEUS parameter. NOTE: some of these details are obtained from third party information.  Assigned (20111102)  None (candidate not yet proposed)    View
47880  CVE-2010-5296  Candidate  wp-includes/capabilities.php in WordPress before 3.0.2, when a Multisite configuration is used, does not require the Super Admin role for the delete_users capability, which allows remote authenticated administrators to bypass intended access restrictions via a delete action.  Assigned (20140120)  None (candidate not yet proposed)    View
48136  CVE-2011-0224  Candidate  CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QuickTime movie file.  Assigned (20101223)  None (candidate not yet proposed)    View
48392  CVE-2011-0480  Candidate  Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.  Assigned (20110114)  None (candidate not yet proposed)    View

Page 706 of 20943, showing 5 records out of 104715 total, starting on record 3526, ending on 3530

Actions