CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
54540 | CVE-2012-1297 | Candidate | Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) delete users via a delete action in the user module, (2) delete news via a delete action in the news module, or (3) delete newsletters via a delete action in the newsletters module. | Assigned (20120227) | None (candidate not yet proposed) | View | |
54796 | CVE-2012-1553 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20120309) | None (candidate not yet proposed) | View | |
55052 | CVE-2012-1809 | Candidate | The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors. | Assigned (20120321) | None (candidate not yet proposed) | View | |
55308 | CVE-2012-2065 | Candidate | Cross-site scripting (XSS) vulnerability in the Language Icons module 6.x-2.x before 6.x-2.1 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with administer languages permissions to inject arbitrary web script or HTML via unspecified vectors. | Assigned (20120404) | None (candidate not yet proposed) | View | |
55564 | CVE-2012-2321 | Candidate | The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) host name or (2) domain name in a DHCP reply. | Assigned (20120419) | None (candidate not yet proposed) | View |
Page 1028 of 20943, showing 5 records out of 104715 total, starting on record 5136, ending on 5140