CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
51453 | CVE-2011-3541 | Candidate | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows local users to affect availability via unknown vectors related to Outside In Filters. | Assigned (20110916) | None (candidate not yet proposed) | View | |
51709 | CVE-2011-3797 | Candidate | ProjectPier 0.8.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/upgrade/templates/layout.php and certain other files. | Assigned (20110923) | None (candidate not yet proposed) | View | |
51965 | CVE-2011-4053 | Candidate | Untrusted search path vulnerability in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) before 9.0.0.11291 allows local users to gain privileges via a Trojan horse DLL in the current working directory. | Assigned (20111013) | None (candidate not yet proposed) | View | |
52221 | CVE-2011-4309 | Candidate | Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to a URL. | Assigned (20111104) | None (candidate not yet proposed) | View | |
52477 | CVE-2011-4565 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.5.1.a, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to include/formdhtmltextarea_preview.php or (2) img BBCODE tag within the message parameter to pmlite.php (aka Private Message). NOTE: some of these details are obtained from third party information. | Assigned (20111128) | None (candidate not yet proposed) | View |
Page 20772 of 20943, showing 5 records out of 104715 total, starting on record 103856, ending on 103860