CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
53007 | CVE-2011-5095 | Candidate | The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923. | Assigned (20120620) | None (candidate not yet proposed) | View | |
53263 | CVE-2012-0020 | Candidate | Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138. | Assigned (20111109) | None (candidate not yet proposed) | View | |
53519 | CVE-2012-0276 | Candidate | Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a (1) SGI32LogLum compressed TIFF image or (2) SGI32LogLum compressed TIFF image with the PhotometricInterpretation encoding set to LogL. | Assigned (20111230) | None (candidate not yet proposed) | View | |
53775 | CVE-2012-0532 | Candidate | Unspecified vulnerability in the Identity Manager component in Oracle Fusion Middleware 11.1.1.3 and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to User Config Management. | Assigned (20120111) | None (candidate not yet proposed) | View | |
54031 | CVE-2012-0788 | Candidate | The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function, as demonstrated by a crash of the Apache HTTP Server. | Assigned (20120119) | None (candidate not yet proposed) | View |
Page 1280 of 20943, showing 5 records out of 104715 total, starting on record 6396, ending on 6400