CVE List

Id CVE No. Status Description Phase Votes Comments Actions
13313  CVE-2005-2107  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p or (2) comment parameter.  Assigned (20050701)  None (candidate not yet proposed)    View
78849  CVE-2015-1572  Candidate  Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.  Assigned (20150210)  None (candidate not yet proposed)    View
13569  CVE-2005-2363  Candidate  Unknown vulnerability in the (1) SMPP dissector, (2) 802.3 dissector, (3) DHCP, (4) MEGACO dissector, or (5) H1 dissector in Ethereal 0.8.15 through 0.10.11 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.  Assigned (20050726)  None (candidate not yet proposed)    View
79105  CVE-2015-1828  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20150217)  None (candidate not yet proposed)    View
13825  CVE-2005-2619  Candidate  Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a (1) ZIP, (2) UUE or (3) TAR archive that contains a .. (dot dot) in the filename, which is not properly handled when generating a preview.  Assigned (20050817)  None (candidate not yet proposed)    View

Page 99 of 20943, showing 5 records out of 104715 total, starting on record 491, ending on 495

Actions