CVE List

Id CVE No. Status Description Phase Votes Comments Actions
52731  CVE-2011-4819  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allow remote attackers to inject arbitrary web script or HTML via the uisesionid parameter to (1) maximo.jsp or (2) the default URI under ui/.  Assigned (20111214)  None (candidate not yet proposed)    View
52987  CVE-2011-5075  Candidate  translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path.  Assigned (20120128)  None (candidate not yet proposed)    View
53243  CVE-2011-5374  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20140929)  None (candidate not yet proposed)    View
53499  CVE-2012-0256  Candidate  Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.  Assigned (20111221)  None (candidate not yet proposed)    View
53755  CVE-2012-0512  Candidate  Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7 and 11.2.0.2 and Oracle Enterprise Manager Grid Control allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Config Management.  Assigned (20120111)  None (candidate not yet proposed)    View

Page 20005 of 20943, showing 5 records out of 104715 total, starting on record 100021, ending on 100025

Actions