CVE List

Id CVE No. Status Description Phase Votes Comments Actions
46591  CVE-2010-4007  Candidate  Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057.  Assigned (20101020)  None (candidate not yet proposed)    View
46847  CVE-2010-4263  Candidate  The igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb) subsystem in the Linux kernel before 2.6.34, when Single Root I/O Virtualization (SR-IOV) and promiscuous mode are enabled but no VLANs are registered, allows remote attackers to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via a VLAN tagged frame.  Assigned (20101116)  None (candidate not yet proposed)    View
47103  CVE-2010-4519  Candidate  Multiple cross-site request forgery (CSRF) vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable all Views or (2) disable all Views.  Assigned (20101209)  None (candidate not yet proposed)    View
47359  CVE-2010-4775  Candidate  The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not properly implement node access logic, which allows remote attackers to discover restricted node titles and relationships.  Assigned (20110323)  None (candidate not yet proposed)    View
47615  CVE-2010-5031  Candidate  Cross-site scripting (XSS) vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web script or HTML via the sstring parameter (aka the Search Box). NOTE: some of these details are obtained from third party information.  Assigned (20111102)  None (candidate not yet proposed)    View

Page 20929 of 20943, showing 5 records out of 104715 total, starting on record 104641, ending on 104645

Actions