CVE List

Id CVE No. Status Description Phase Votes Comments Actions
58596  CVE-2012-5353  Candidate  Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."  Assigned (20121009)  None (candidate not yet proposed)    View
58852  CVE-2012-5609  Candidate  Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted mount.php file in a ZIP file.  Assigned (20121024)  None (candidate not yet proposed)    View
59108  CVE-2012-5865  Candidate  SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the activityid parameter in a stats action.  Assigned (20121114)  None (candidate not yet proposed)    View
59364  CVE-2012-6121  Candidate  Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.8.5 allows remote attackers to inject arbitrary web script or HTML via a (1) data:text or (2) vbscript link.  Assigned (20121206)  None (candidate not yet proposed)    View
59620  CVE-2012-6377  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20121216)  None (candidate not yet proposed)    View

Page 18790 of 20943, showing 5 records out of 104715 total, starting on record 93946, ending on 93950

Actions