CVE List

Id CVE No. Status Description Phase Votes Comments Actions
78338  CVE-2015-1061  Candidate  IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling.  Assigned (20150116)  None (candidate not yet proposed)    View
13058  CVE-2005-1852  Candidate  Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.  Assigned (20050606)  None (candidate not yet proposed)    View
78594  CVE-2015-1317  Candidate  Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by deleting all WebContents while a RenderProcessHost instance still exists.  Assigned (20150122)  None (candidate not yet proposed)    View
13314  CVE-2005-2108  Candidate  SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_RAW_POST_DATA variable, which stores the data in an XML file.  Assigned (20050701)  None (candidate not yet proposed)    View
78850  CVE-2015-1573  Candidate  The nft_flush_table function in net/netfilter/nf_tables_api.c in the Linux kernel before 3.18.5 mishandles the interaction between cross-chain jumps and ruleset flushes, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability.  Assigned (20150210)  None (candidate not yet proposed)    View

Page 789 of 20943, showing 5 records out of 104715 total, starting on record 3941, ending on 3945

Actions