CVE List

Id CVE No. Status Description Phase Votes Comments Actions
17410  CVE-2006-1306  Candidate  Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability."  Assigned (20060320)  None (candidate not yet proposed)    View
82946  CVE-2015-5669  Candidate  Techno Project Japan Enisys Gw before 1.4.1 allows remote authenticated users to write to arbitrary files and consequently execute arbitrary code via unspecified vectors.  Assigned (20150724)  None (candidate not yet proposed)    View
17666  CVE-2006-1562  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) autor, (2) www, (3) temat, and (4) tresc parameters.  Assigned (20060331)  None (candidate not yet proposed)    View
83202  CVE-2015-5925  Candidate  The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-5926.  Assigned (20150806)  None (candidate not yet proposed)    View
17922  CVE-2006-1818  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the (1) first_name and (2) last_name parameter in myaccounts.php. NOTE: portions of these details were obtained from third party sources instead of the original disclosure.  Assigned (20060417)  None (candidate not yet proposed)    View

Page 796 of 20943, showing 5 records out of 104715 total, starting on record 3976, ending on 3980

Actions