CVE List

Id CVE No. Status Description Phase Votes Comments Actions
62195  CVE-2013-2248  Candidate  Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix.  Assigned (20130219)  None (candidate not yet proposed)    View
62451  CVE-2013-2504  Candidate  Cross-site scripting (XSS) vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 (aka 5.33.946.0) allows remote attackers to inject arbitrary web script or HTML via the query string.  Assigned (20130307)  None (candidate not yet proposed)    View
62707  CVE-2013-2760  Candidate  Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .m3u file.  Assigned (20130403)  None (candidate not yet proposed)    View
62963  CVE-2013-3016  Candidate  IBM WebSphere Portal 6.1, 7.0, and 8.0 allows remote attackers to access the user directory via a crafted request for a servlet, related to the serveServletsByClassnameEnabled setting.  Assigned (20130412)  None (candidate not yet proposed)    View
63219  CVE-2013-3272  Candidate  EMC Replication Manager (RM) before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitive information by reading a file and conducting an unspecified decoding attack.  Assigned (20130426)  None (candidate not yet proposed)    View

Page 19376 of 20943, showing 5 records out of 104715 total, starting on record 96876, ending on 96880

Actions