CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
52731 | CVE-2011-4819 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allow remote attackers to inject arbitrary web script or HTML via the uisesionid parameter to (1) maximo.jsp or (2) the default URI under ui/. | Assigned (20111214) | None (candidate not yet proposed) | View | |
52987 | CVE-2011-5075 | Candidate | translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path. | Assigned (20120128) | None (candidate not yet proposed) | View | |
53243 | CVE-2011-5374 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20140929) | None (candidate not yet proposed) | View | |
53499 | CVE-2012-0256 | Candidate | Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header. | Assigned (20111221) | None (candidate not yet proposed) | View | |
53755 | CVE-2012-0512 | Candidate | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7 and 11.2.0.2 and Oracle Enterprise Manager Grid Control allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Config Management. | Assigned (20120111) | None (candidate not yet proposed) | View |
Page 20005 of 20943, showing 5 records out of 104715 total, starting on record 100021, ending on 100025