CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
51441 | CVE-2011-3529 | Candidate | Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Talent Acquisition Manager. | Assigned (20110916) | None (candidate not yet proposed) | View | |
51697 | CVE-2011-3785 | Candidate | PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files. | Assigned (20110923) | None (candidate not yet proposed) | View | |
51953 | CVE-2011-4041 | Candidate | webvrpcs.exe in Advantech/BroadWin WebAccess allows remote attackers to execute arbitrary code or obtain a security-code value via a long string in an RPC request to TCP port 4592. | Assigned (20111013) | None (candidate not yet proposed) | View | |
52209 | CVE-2011-4297 | Candidate | comment/lib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not properly restrict comment capabilities, which allows remote attackers to post a comment by leveraging the guest role and operating on a front-page activity. | Assigned (20111104) | None (candidate not yet proposed) | View | |
52465 | CVE-2011-4553 | Candidate | Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow (1) remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the return_to parameter, and allow (2) remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via crafted characters in the domain name of a subdomain. | Assigned (20111127) | None (candidate not yet proposed) | View |
Page 19811 of 20943, showing 5 records out of 104715 total, starting on record 99051, ending on 99055