CVE List

Id CVE No. Status Description Phase Votes Comments Actions
51453  CVE-2011-3541  Candidate  Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows local users to affect availability via unknown vectors related to Outside In Filters.  Assigned (20110916)  None (candidate not yet proposed)    View
51709  CVE-2011-3797  Candidate  ProjectPier 0.8.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/upgrade/templates/layout.php and certain other files.  Assigned (20110923)  None (candidate not yet proposed)    View
51965  CVE-2011-4053  Candidate  Untrusted search path vulnerability in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) before 9.0.0.11291 allows local users to gain privileges via a Trojan horse DLL in the current working directory.  Assigned (20111013)  None (candidate not yet proposed)    View
52221  CVE-2011-4309  Candidate  Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to a URL.  Assigned (20111104)  None (candidate not yet proposed)    View
52477  CVE-2011-4565  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.5.1.a, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to include/formdhtmltextarea_preview.php or (2) img BBCODE tag within the message parameter to pmlite.php (aka Private Message). NOTE: some of these details are obtained from third party information.  Assigned (20111128)  None (candidate not yet proposed)    View

Page 20772 of 20943, showing 5 records out of 104715 total, starting on record 103856, ending on 103860

Actions