CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
56569 | CVE-2012-3326 | Candidate | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Assigned (20120607) | None (candidate not yet proposed) | View | |
56825 | CVE-2012-3582 | Candidate | Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic circumstances by making a request near the end of a user"s session. | Assigned (20120619) | None (candidate not yet proposed) | View | |
57081 | CVE-2012-3838 | Candidate | Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/babygekko/index.php or (2) templates/html5demo/index.php. | Assigned (20120703) | None (candidate not yet proposed) | View | |
57337 | CVE-2012-4094 | Candidate | Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers to cause a denial of service by reading and forging control messages associated with Smart Call Home reports, aka Bug ID CSCtl00198. | Assigned (20120731) | None (candidate not yet proposed) | View | |
57593 | CVE-2012-4350 | Candidate | Multiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components in Symantec Enterprise Security Manager (ESM) before 11.0 allow local users to gain privileges via unspecified vectors. | Assigned (20120816) | None (candidate not yet proposed) | View |
Page 20456 of 20943, showing 5 records out of 104715 total, starting on record 102276, ending on 102280