CVE List

Id CVE No. Status Description Phase Votes Comments Actions
46600  CVE-2010-4016  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20101020)  None (candidate not yet proposed)    View
46856  CVE-2010-4272  Candidate  SQL injection vulnerability in the Pulse Infotech Sponsor Wall (com_sponsorwall) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.  Assigned (20101116)  None (candidate not yet proposed)    View
47112  CVE-2010-4528  Candidate  directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a short p2pv2 packet in a DirectConnect (aka direct connection) session.  Assigned (20101209)  None (candidate not yet proposed)    View
47368  CVE-2010-4784  Candidate  Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.  Assigned (20110407)  None (candidate not yet proposed)    View
47624  CVE-2010-5040  Candidate  PHP remote file inclusion vulnerability in nucleus/plugins/NP_gallery.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary PHP code via a URL in the DIR_NUCLEUS parameter. NOTE: some of these details are obtained from third party information.  Assigned (20111102)  None (candidate not yet proposed)    View

Page 711 of 20943, showing 5 records out of 104715 total, starting on record 3551, ending on 3555

Actions