CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 47112 | CVE-2010-4528 | Candidate | directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a short p2pv2 packet in a DirectConnect (aka direct connection) session. | Assigned (20101209) | None (candidate not yet proposed) | View | |
| 47368 | CVE-2010-4784 | Candidate | Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. | Assigned (20110407) | None (candidate not yet proposed) | View | |
| 47624 | CVE-2010-5040 | Candidate | PHP remote file inclusion vulnerability in nucleus/plugins/NP_gallery.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary PHP code via a URL in the DIR_NUCLEUS parameter. NOTE: some of these details are obtained from third party information. | Assigned (20111102) | None (candidate not yet proposed) | View | |
| 47880 | CVE-2010-5296 | Candidate | wp-includes/capabilities.php in WordPress before 3.0.2, when a Multisite configuration is used, does not require the Super Admin role for the delete_users capability, which allows remote authenticated administrators to bypass intended access restrictions via a delete action. | Assigned (20140120) | None (candidate not yet proposed) | View | |
| 48136 | CVE-2011-0224 | Candidate | CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QuickTime movie file. | Assigned (20101223) | None (candidate not yet proposed) | View |
Page 718 of 20943, showing 5 records out of 104715 total, starting on record 3586, ending on 3590
