CVE List

Id CVE No. Status Description Phase Votes Comments Actions
50944  CVE-2011-3032  Candidate  Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG values.  Assigned (20110809)  None (candidate not yet proposed)    View
51200  CVE-2011-3288  Candidate  Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large number of nested entity references, aka Bug IDs CSCtq89842 and CSCtq88547, a similar issue to CVE-2003-1564.  Assigned (20110829)  None (candidate not yet proposed)    View
51456  CVE-2011-3544  Candidate  Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.  Assigned (20110916)  None (candidate not yet proposed)    View
51712  CVE-2011-3800  Candidate  Serendipity 1.5.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/newspaper/layout.php and certain other files.  Assigned (20110923)  None (candidate not yet proposed)    View
51968  CVE-2011-4056  Candidate  An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to create or overwrite arbitrary files via the save method.  Assigned (20111013)  None (candidate not yet proposed)    View

Page 103 of 20943, showing 5 records out of 104715 total, starting on record 511, ending on 515

Actions