CVE List

Id CVE No. Status Description Phase Votes Comments Actions
45059  CVE-2010-2475  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20100628)  None (candidate not yet proposed)    View
45315  CVE-2010-2731  Candidate  Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 on Windows XP SP3, when directory-based Basic Authentication is enabled, allows remote attackers to bypass intended access restrictions and execute ASP files via a crafted request, aka "Directory Authentication Bypass Vulnerability."  Assigned (20100714)  None (candidate not yet proposed)    View
45571  CVE-2010-2987  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in Cisco Wireless Control System (WCS) 7.x before 7.0.164, as used in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtg33854.  Assigned (20100809)  None (candidate not yet proposed)    View
45827  CVE-2010-3243  Candidate  Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2 and Office SharePoint Server 2007 SP2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "HTML Sanitization Vulnerability."  Assigned (20100903)  None (candidate not yet proposed)    View
46083  CVE-2010-3499  Candidate  F-Secure Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution. NOTE: the researcher indicates that a vendor response was received, stating that "the inability to catch these files are caused by lacking functionality rather than programming errors."  Assigned (20100924)  None (candidate not yet proposed)    View

Page 304 of 20943, showing 5 records out of 104715 total, starting on record 1516, ending on 1520

Actions