CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
42731 | CVE-2010-0147 | Candidate | SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. | Assigned (20100104) | None (candidate not yet proposed) | View | |
42987 | CVE-2010-0403 | Candidate | Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the app parameter. | Assigned (20100127) | None (candidate not yet proposed) | View | |
43243 | CVE-2010-0659 | Candidate | The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed GIF file that specifies a large size. | Assigned (20100218) | None (candidate not yet proposed) | View | |
43499 | CVE-2010-0915 | Candidate | Unspecified vulnerability in the Oracle Advanced Product Catalog component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. | Assigned (20100303) | None (candidate not yet proposed) | View | |
43755 | CVE-2010-1171 | Candidate | Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service (failed yum operations) via vectors related to configuration and package group (comps.xml) files for channels. | Assigned (20100329) | None (candidate not yet proposed) | View |
Page 19335 of 20943, showing 5 records out of 104715 total, starting on record 96671, ending on 96675