CVE List

Id CVE No. Status Description Phase Votes Comments Actions
42226  CVE-2009-4791  Candidate  Multiple SQL injection vulnerabilities in Family Connections (aka FCMS) before 1.8.2 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter to addressbook.php, (2) id parameter to recipes.php, (3) year parameter to register.php, (4) poll_id parameter to home.php, and (5) email parameter to lostpw.php.  Assigned (20100422)  None (candidate not yet proposed)    View
42482  CVE-2009-5047  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20110114)  None (candidate not yet proposed)    View
42738  CVE-2010-0154  Candidate  Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the l parameter, related to an "Insecure Direct Object Reference vulnerability."  Assigned (20100104)  None (candidate not yet proposed)    View
42994  CVE-2010-0410  Candidate  drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and system crash) by sending the kernel many NETLINK_CONNECTOR messages.  Assigned (20100127)  None (candidate not yet proposed)    View
43250  CVE-2010-0666  Candidate  Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service (crash) via unknown a crafted SOAP request, a different issue than CVE-2008-0926.  Assigned (20100219)  None (candidate not yet proposed)    View

Page 19887 of 20943, showing 5 records out of 104715 total, starting on record 99431, ending on 99435

Actions