CVE List

Id CVE No. Status Description Phase Votes Comments Actions
40706  CVE-2009-3271  Candidate  Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element.  Assigned (20090921)  None (candidate not yet proposed)    View
40962  CVE-2009-3527  Candidate  Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (crash) or gain privileges via vectors related to kqueues, which triggers a use after free, leading to a NULL pointer dereference or memory corruption.  Assigned (20091002)  None (candidate not yet proposed)    View
41218  CVE-2009-3783  Candidate  Cross-site scripting (XSS) vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vector.  Assigned (20091026)  None (candidate not yet proposed)    View
41474  CVE-2009-4039  Candidate  Cross-site scripting (XSS) vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  Assigned (20091120)  None (candidate not yet proposed)    View
41730  CVE-2009-4295  Candidate  Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic.  Assigned (20091211)  None (candidate not yet proposed)    View

Page 224 of 20943, showing 5 records out of 104715 total, starting on record 1116, ending on 1120

Actions