CVE List

Id CVE No. Status Description Phase Votes Comments Actions
43243  CVE-2010-0659  Candidate  The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed GIF file that specifies a large size.  Assigned (20100218)  None (candidate not yet proposed)    View
43499  CVE-2010-0915  Candidate  Unspecified vulnerability in the Oracle Advanced Product Catalog component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.  Assigned (20100303)  None (candidate not yet proposed)    View
43755  CVE-2010-1171  Candidate  Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service (failed yum operations) via vectors related to configuration and package group (comps.xml) files for channels.  Assigned (20100329)  None (candidate not yet proposed)    View
44011  CVE-2010-1427  Candidate  Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.  Assigned (20100415)  None (candidate not yet proposed)    View
44267  CVE-2010-1683  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20100430)  None (candidate not yet proposed)    View

Page 19324 of 20943, showing 5 records out of 104715 total, starting on record 96616, ending on 96620

Actions