CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 42255 | CVE-2009-4820 | Candidate | Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for veribaze/angelo.mdb. | Assigned (20100427) | None (candidate not yet proposed) | View | |
| 42511 | CVE-2009-5076 | Candidate | CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password_forgotten.php appended as the PATH_INFO, which bypasses a check that uses PHP_SELF, which is not properly handled by (a) includes/application_top.php and (b) admin/includes/application_top.php, as exploited in the wild in 2009. | Assigned (20110607) | None (candidate not yet proposed) | View | |
| 42767 | CVE-2010-0183 | Candidate | Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus. | Assigned (20100106) | None (candidate not yet proposed) | View | |
| 43023 | CVE-2010-0439 | Candidate | Chip Salzenberg Deliver allows local users to cause a denial of service, obtain sensitive information, and possibly change the ownership of arbitrary files via a symlink attack on an unspecified file. | Assigned (20100127) | None (candidate not yet proposed) | View | |
| 43279 | CVE-2010-0695 | Candidate | Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary web script or HTML via the nav_id parameter. | Assigned (20100223) | None (candidate not yet proposed) | View |
Page 1252 of 20943, showing 5 records out of 104715 total, starting on record 6256, ending on 6260
