CVE List

Id CVE No. Status Description Phase Votes Comments Actions
47862  CVE-2010-5278  Candidate  Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the class_key parameter. NOTE: some of these details are obtained from third party information.  Assigned (20121007)  None (candidate not yet proposed)    View
48118  CVE-2011-0206  Candidate  Buffer overflow in International Components for Unicode (ICU) in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving uppercase strings.  Assigned (20101223)  None (candidate not yet proposed)    View
48374  CVE-2011-0462  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service (OBS) before 2.1.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  Assigned (20110114)  None (candidate not yet proposed)    View
48630  CVE-2011-0718  Candidate  Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks.  Assigned (20110131)  None (candidate not yet proposed)    View
48886  CVE-2011-0974  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20110210)  None (candidate not yet proposed)    View

Page 20214 of 20943, showing 5 records out of 104715 total, starting on record 101066, ending on 101070

Actions