CVE List

Id CVE No. Status Description Phase Votes Comments Actions
41707  CVE-2009-4272  Candidate  A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (deadlock) via crafted packets that force collisions in the IPv4 routing hash table, and trigger a routing "emergency" in which a hash chain is too long. NOTE: this is related to an issue in the Linux kernel before 2.6.31, when the kernel routing cache is disabled, involving an uninitialized pointer and a panic.  Assigned (20091210)  None (candidate not yet proposed)    View
41963  CVE-2009-4528  Candidate  The Organic Groups (OG) Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to bypass intended access restrictions, and create, modify, or read a vocabulary, via unspecified vectors.  Assigned (20091231)  None (candidate not yet proposed)    View
42219  CVE-2009-4784  Candidate  SQL injection vulnerability in the Joaktree (com_joaktree) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the treeId parameter to index.php.  Assigned (20100421)  None (candidate not yet proposed)    View
42475  CVE-2009-5040  Candidate  CallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to cause a denial of service (device crash) by using an extension mobility (EM) phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555.  Assigned (20110107)  None (candidate not yet proposed)    View
42731  CVE-2010-0147  Candidate  SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.  Assigned (20100104)  None (candidate not yet proposed)    View

Page 19347 of 20943, showing 5 records out of 104715 total, starting on record 96731, ending on 96735

Actions