CVE List

Id CVE No. Status Description Phase Votes Comments Actions
43009  CVE-2010-0425  Candidate  modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."  Assigned (20100127)  None (candidate not yet proposed)    View
43265  CVE-2010-0681  Candidate  ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for admin/backup.sql.  Assigned (20100222)  None (candidate not yet proposed)    View
43521  CVE-2010-0937  Candidate  Multiple unspecified vulnerabilities in Visualization Library before 2009.08.812 have unknown impact and attack vectors.  Assigned (20100308)  None (candidate not yet proposed)    View
43777  CVE-2010-1193  Candidate  Cross-site scripting (XSS) vulnerability in WebAccess in VMware Server 2.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON error messages.  Assigned (20100330)  None (candidate not yet proposed)    View
44033  CVE-2010-1449  Candidate  Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.  Assigned (20100415)  None (candidate not yet proposed)    View

Page 145 of 20943, showing 5 records out of 104715 total, starting on record 721, ending on 725

Actions