CVE List

Id CVE No. Status Description Phase Votes Comments Actions
47359  CVE-2010-4775  Candidate  The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not properly implement node access logic, which allows remote attackers to discover restricted node titles and relationships.  Assigned (20110323)  None (candidate not yet proposed)    View
47615  CVE-2010-5031  Candidate  Cross-site scripting (XSS) vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web script or HTML via the sstring parameter (aka the Search Box). NOTE: some of these details are obtained from third party information.  Assigned (20111102)  None (candidate not yet proposed)    View
47871  CVE-2010-5287  Candidate  SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute arbitrary SQL commands via the id parameter.  Assigned (20130130)  None (candidate not yet proposed)    View
48127  CVE-2011-0215  Candidate  ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file.  Assigned (20101223)  None (candidate not yet proposed)    View
48383  CVE-2011-0471  Candidate  The node-iteration implementation in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 does not properly handle pointers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.  Assigned (20110114)  None (candidate not yet proposed)    View

Page 20319 of 20943, showing 5 records out of 104715 total, starting on record 101591, ending on 101595

Actions