CVE List

Id CVE No. Status Description Phase Votes Comments Actions
57085  CVE-2012-3842  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via the (1) select0 or (2) select8 parameters.  Assigned (20120703)  None (candidate not yet proposed)    View
57341  CVE-2012-4098  Candidate  The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP service reset and resync) via a malformed UPDATE message, aka Bug ID CSCtn13055.  Assigned (20120731)  None (candidate not yet proposed)    View
57597  CVE-2012-4354  Candidate  TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer processing that can lead to a buffer overflow. NOTE: some of these details are obtained from third party information.  Assigned (20120819)  None (candidate not yet proposed)    View
57853  CVE-2012-4610  Candidate  EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to the proxy client.  Assigned (20120824)  None (candidate not yet proposed)    View
58109  CVE-2012-4866  Candidate  Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as the current working directory. NOTE: some of these details are obtained from third party information.  Assigned (20120906)  None (candidate not yet proposed)    View

Page 20778 of 20943, showing 5 records out of 104715 total, starting on record 103886, ending on 103890

Actions