CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
47862 | CVE-2010-5278 | Candidate | Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the class_key parameter. NOTE: some of these details are obtained from third party information. | Assigned (20121007) | None (candidate not yet proposed) | View | |
48118 | CVE-2011-0206 | Candidate | Buffer overflow in International Components for Unicode (ICU) in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving uppercase strings. | Assigned (20101223) | None (candidate not yet proposed) | View | |
48374 | CVE-2011-0462 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service (OBS) before 2.1.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Assigned (20110114) | None (candidate not yet proposed) | View | |
48630 | CVE-2011-0718 | Candidate | Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks. | Assigned (20110131) | None (candidate not yet proposed) | View | |
48886 | CVE-2011-0974 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20110210) | None (candidate not yet proposed) | View |
Page 20214 of 20943, showing 5 records out of 104715 total, starting on record 101066, ending on 101070