CVE List

Id CVE No. Status Description Phase Votes Comments Actions
2787  CVE-2000-1220  Candidate  The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.  Assigned (20050421)  None (candidate not yet proposed)    View
68323  CVE-2014-0914  Candidate  Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x and 7.x through 7.5.0.6, Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 6.2 through 6.2.8 for Tivoli IT Asset Management for IT and Maximo Service Desk allows remote authenticated users to inject arbitrary web script or HTML via the Query Description Field.  Assigned (20140106)  None (candidate not yet proposed)    View
3043  CVE-2001-0222  Entry  webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack.        View
68579  CVE-2014-1284  Candidate  ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2019. Reason: This candidate is a duplicate of CVE-2014-2019. Notes: All CVE users should reference CVE-2014-2019 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.  Assigned (20140108)  None (candidate not yet proposed)    View
3299  CVE-2001-0482  Entry  Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or execute arbitrary commands by modifying kernel variables such as MaxFiles, MaxInodes, and ModProbePath in /proc/sys via calls to sysctl.        View

Page 18621 of 20943, showing 5 records out of 104715 total, starting on record 93101, ending on 93105

Actions