CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 40192 | CVE-2009-2757 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20090812) | None (candidate not yet proposed) | View | |
| 40448 | CVE-2009-3013 | Candidate | Opera 9.52 and earlier, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header. NOTE: the JavaScript executes outside of the context of the HTTP site. | Assigned (20090831) | None (candidate not yet proposed) | View | |
| 40704 | CVE-2009-3269 | Candidate | Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a series of automatic submissions of a form containing a KEYGEN element, a related issue to CVE-2009-1828. | Assigned (20090918) | None (candidate not yet proposed) | View | |
| 40960 | CVE-2009-3525 | Candidate | The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the para-virtualized guest console to boot the guest or modify the guest"s kernel boot parameters without providing the expected password. | Assigned (20091001) | None (candidate not yet proposed) | View | |
| 41216 | CVE-2009-3781 | Candidate | The filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not properly check node-access permissions for Drupal core private files, which allows remote attackers to access unauthorized files via unspecified vectors. | Assigned (20091026) | None (candidate not yet proposed) | View |
Page 1218 of 20943, showing 5 records out of 104715 total, starting on record 6086, ending on 6090
