CVE List

Id CVE No. Status Description Phase Votes Comments Actions
56577  CVE-2012-3334  Candidate  Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 allows remote authenticated users to execute arbitrary code via crafted arguments in a SET COLLATION statement.  Assigned (20120607)  None (candidate not yet proposed)    View
56833  CVE-2012-3590  Candidate  WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.  Assigned (20120619)  None (candidate not yet proposed)    View
57089  CVE-2012-3846  Candidate  Cross-site scripting (XSS) vulnerability in index.php in PHP-pastebin 2.1 allows remote attackers to inject arbitrary web script or HTML via the title parameter.  Assigned (20120703)  None (candidate not yet proposed)    View
57345  CVE-2012-4102  Candidate  The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq02600.  Assigned (20120731)  None (candidate not yet proposed)    View
57601  CVE-2012-4358  Candidate  Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted positive integer after the opcode.  Assigned (20120819)  None (candidate not yet proposed)    View

Page 185 of 20943, showing 5 records out of 104715 total, starting on record 921, ending on 925

Actions