CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
43746 | CVE-2010-1162 | Candidate | The release_one_tty function in drivers/char/tty_io.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the put_pid function, which has unspecified impact and local attack vectors. | Assigned (20100329) | None (candidate not yet proposed) | View | |
44002 | CVE-2010-1418 | Candidate | Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via a FRAME element with a SRC attribute composed of a javascript: sequence preceded by spaces. | Assigned (20100415) | None (candidate not yet proposed) | View | |
44258 | CVE-2010-1674 | Candidate | The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute. | Assigned (20100430) | None (candidate not yet proposed) | View | |
44514 | CVE-2010-1930 | Candidate | Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (daemon crash) via a long tree parameter in a login request to nps/servlet/webacc. | Assigned (20100511) | None (candidate not yet proposed) | View | |
44770 | CVE-2010-2186 | Candidate | Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors. | Assigned (20100607) | None (candidate not yet proposed) | View |
Page 18620 of 20943, showing 5 records out of 104715 total, starting on record 93096, ending on 93100