CVE List

Id CVE No. Status Description Phase Votes Comments Actions
55547  CVE-2012-2304  Candidate  The Linkit module 7.x-2.x before 7.x-2.3 for Drupal, when using an entity access module, does not check permissions when searching for entities, which allows remote attackers to obtain sensitive information via unspecified vectors.  Assigned (20120419)  None (candidate not yet proposed)    View
55803  CVE-2012-2560  Candidate  Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to port 8001.  Assigned (20120509)  None (candidate not yet proposed)    View
56059  CVE-2012-2816  Candidate  Google Chrome before 20.0.1132.43 on Windows does not properly isolate sandboxed processes, which might allow remote attackers to cause a denial of service (process interference) via unspecified vectors.  Assigned (20120519)  None (candidate not yet proposed)    View
56315  CVE-2012-3072  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20120530)  None (candidate not yet proposed)    View
56571  CVE-2012-3328  Candidate  Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and Configuration Management Database (CCMDB) 7.1 and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden frame footer.  Assigned (20120607)  None (candidate not yet proposed)    View

Page 20615 of 20943, showing 5 records out of 104715 total, starting on record 103071, ending on 103075

Actions