CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
52224 | CVE-2011-4312 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) diff viewer or (2) screenshot component. | Assigned (20111104) | None (candidate not yet proposed) | View | |
52480 | CVE-2011-4568 | Candidate | Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI. | Assigned (20111128) | None (candidate not yet proposed) | View | |
52736 | CVE-2011-4824 | Candidate | SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the login_username parameter. | Assigned (20111214) | None (candidate not yet proposed) | View | |
52992 | CVE-2011-5080 | Candidate | Cross-site scripting (XSS) vulnerability in lib/class.tx_jftcaforms_tceFunc.php in the Additional TCA Forms (jftcaforms) extension before 0.2.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Assigned (20120214) | None (candidate not yet proposed) | View | |
53248 | CVE-2012-0005 | Candidate | The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka "CSRSS Elevation of Privilege Vulnerability." | Assigned (20111109) | None (candidate not yet proposed) | View |
Page 104 of 20943, showing 5 records out of 104715 total, starting on record 516, ending on 520