CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
62195 | CVE-2013-2248 | Candidate | Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix. | Assigned (20130219) | None (candidate not yet proposed) | View | |
62451 | CVE-2013-2504 | Candidate | Cross-site scripting (XSS) vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 (aka 5.33.946.0) allows remote attackers to inject arbitrary web script or HTML via the query string. | Assigned (20130307) | None (candidate not yet proposed) | View | |
62707 | CVE-2013-2760 | Candidate | Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .m3u file. | Assigned (20130403) | None (candidate not yet proposed) | View | |
62963 | CVE-2013-3016 | Candidate | IBM WebSphere Portal 6.1, 7.0, and 8.0 allows remote attackers to access the user directory via a crafted request for a servlet, related to the serveServletsByClassnameEnabled setting. | Assigned (20130412) | None (candidate not yet proposed) | View | |
63219 | CVE-2013-3272 | Candidate | EMC Replication Manager (RM) before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitive information by reading a file and conducting an unspecified decoding attack. | Assigned (20130426) | None (candidate not yet proposed) | View |
Page 19376 of 20943, showing 5 records out of 104715 total, starting on record 96876, ending on 96880