CVE List

Id CVE No. Status Description Phase Votes Comments Actions
89858  CVE-2016-3039  Candidate  IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.  Assigned (20160309)  None (candidate not yet proposed)    View
24578  CVE-2007-1221  Candidate  The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of the hypervisor syscall with a certain register set, which bypasses intended code protection.  Assigned (20070302)  None (candidate not yet proposed)    View
90114  CVE-2016-3295  Candidate  Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."  Assigned (20160315)  None (candidate not yet proposed)    View
24834  CVE-2007-1477  Candidate  ** DISPUTED ** Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cfg_language parameter. NOTE: this issue has been disputed by CVE, since the cfg_language variable is configured upon proper product installation.  Assigned (20070316)  None (candidate not yet proposed)    View
90370  CVE-2016-3551  Candidate  Unspecified vulnerability in the Oracle Web Services component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXWS Web Services Stack.  Assigned (20160317)  None (candidate not yet proposed)    View

Page 807 of 20943, showing 5 records out of 104715 total, starting on record 4031, ending on 4035

Actions