CVE List

Id CVE No. Status Description Phase Votes Comments Actions
60414  CVE-2013-0467  Candidate  IBM Eclipse Help System (IEHS), as used in IBM Data Studio 3.1 and 3.1.1 and other products, allows remote authenticated users to read source code via a crafted URL.  Assigned (20121216)  None (candidate not yet proposed)    View
60670  CVE-2013-0723  Candidate  Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a crafted spreadsheet file.  Assigned (20130102)  None (candidate not yet proposed)    View
60926  CVE-2013-0979  Candidate  lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of arbitrary files via a backup that contains a pathname with a symlink.  Assigned (20130110)  None (candidate not yet proposed)    View
61182  CVE-2013-1235  Candidate  Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service (TELNET outage) by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507.  Assigned (20130111)  None (candidate not yet proposed)    View
61438  CVE-2013-1491  Candidate  The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.  Assigned (20130130)  None (candidate not yet proposed)    View

Page 19703 of 20943, showing 5 records out of 104715 total, starting on record 98511, ending on 98515

Actions