CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
58596 | CVE-2012-5353 | Candidate | Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack." | Assigned (20121009) | None (candidate not yet proposed) | View | |
58852 | CVE-2012-5609 | Candidate | Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted mount.php file in a ZIP file. | Assigned (20121024) | None (candidate not yet proposed) | View | |
59108 | CVE-2012-5865 | Candidate | SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the activityid parameter in a stats action. | Assigned (20121114) | None (candidate not yet proposed) | View | |
59364 | CVE-2012-6121 | Candidate | Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.8.5 allows remote attackers to inject arbitrary web script or HTML via a (1) data:text or (2) vbscript link. | Assigned (20121206) | None (candidate not yet proposed) | View | |
59620 | CVE-2012-6377 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20121216) | None (candidate not yet proposed) | View |
Page 18790 of 20943, showing 5 records out of 104715 total, starting on record 93946, ending on 93950