CVE List

Id CVE No. Status Description Phase Votes Comments Actions
93045  CVE-2016-6225  Candidate  xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394.  Assigned (20160715)  None (candidate not yet proposed)    View
14007  CVE-2005-2801  Candidate  xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied.  Assigned (20050906)  None (candidate not yet proposed)    View
35104  CVE-2008-4987  Candidate  xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/ldconfig.tmp, (b) /tmp/ldconf.tmp, and (c) /tmp/ld.so.conf temporary files, related to the (1) get-maptools.sh and (2) get_shapelib.sh scripts.  Assigned (20081106)  None (candidate not yet proposed)    View
42639  CVE-2010-0055  Candidate  xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package.  Assigned (20091215)  None (candidate not yet proposed)    View
67768  CVE-2014-0359  Candidate  Xangati XSR before 11 and XNR before 7 allows remote attackers to execute arbitrary commands via shell metacharacters in a gui_input_test.pl params parameter to servlet/Installer.  Assigned (20131205)  None (candidate not yet proposed)    View

Page 113 of 20943, showing 5 records out of 104715 total, starting on record 561, ending on 565

Actions