CVE List

Id CVE No. Status Description Phase Votes Comments Actions
46337  CVE-2010-3753  Candidate  programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in the cisco_banner (aka server_banner) field, a different vulnerability than CVE-2010-3308.  Assigned (20101005)  None (candidate not yet proposed)    View
46593  CVE-2010-4009  Candidate  Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.  Assigned (20101020)  None (candidate not yet proposed)    View
46849  CVE-2010-4265  Candidate  The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09 allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data, related to a missing CVE-2010-3862 patch. NOTE: this can be considered a duplicate of CVE-2010-3862 because a missing patch should not be assigned a separate CVE identifier.  Assigned (20101116)  None (candidate not yet proposed)    View
47105  CVE-2010-4521  Candidate  Cross-site scripting (XSS) vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path.  Assigned (20101209)  None (candidate not yet proposed)    View
47361  CVE-2010-4777  Candidate  The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash.  Assigned (20110328)  None (candidate not yet proposed)    View

Page 177 of 20943, showing 5 records out of 104715 total, starting on record 881, ending on 885

Actions