CVE List

Id CVE No. Status Description Phase Votes Comments Actions
48386  CVE-2011-0474  Candidate  Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."  Assigned (20110114)  None (candidate not yet proposed)    View
48642  CVE-2011-0730  Candidate  Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue.  Assigned (20110201)  None (candidate not yet proposed)    View
48898  CVE-2011-0986  Candidate  phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.  Assigned (20110211)  None (candidate not yet proposed)    View
49154  CVE-2011-1242  Candidate  Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."  Assigned (20110304)  None (candidate not yet proposed)    View
49410  CVE-2011-1498  Candidate  Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header.  Assigned (20110321)  None (candidate not yet proposed)    View

Page 230 of 20943, showing 5 records out of 104715 total, starting on record 1146, ending on 1150

Actions