CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 58903 | CVE-2012-5660 | Candidate | abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes." | Assigned (20121024) | None (candidate not yet proposed) | View | |
| 59159 | CVE-2012-5916 | Candidate | Neocrome Seditio build 161 allows remote attackers to obtain sensitive information via a direct request to (1) docs/new/seditio-createnew-160.sql, (2) docs/upgrade/sedito_convert_to_utf8.optional.sql, or (3) system/install/install.parser.sql. | Assigned (20121117) | None (candidate not yet proposed) | View | |
| 59415 | CVE-2012-6172 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20121206) | None (candidate not yet proposed) | View | |
| 59671 | CVE-2012-6428 | Candidate | Carlo Gavazzi EOS-Box with firmware before 1.0.0.1080_2.1.10 establishes multiple hardcoded accounts, which makes it easier for remote attackers to obtain administrative access by reading a password in a PHP script, a similar issue to CVE-2012-5862. | Assigned (20121218) | None (candidate not yet proposed) | View | |
| 59927 | CVE-2012-6684 | Candidate | Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI. | Assigned (20150105) | None (candidate not yet proposed) | View |
Page 1904 of 20943, showing 5 records out of 104715 total, starting on record 9516, ending on 9520
