CVE List

Id CVE No. Status Description Phase Votes Comments Actions
48643  CVE-2011-0731  Candidate  Buffer overflow in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors.  Assigned (20110201)  None (candidate not yet proposed)    View
48899  CVE-2011-0987  Candidate  The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user"s execution of a SQL query by creating a bookmark.  Assigned (20110211)  None (candidate not yet proposed)    View
49155  CVE-2011-1243  Candidate  The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."  Assigned (20110304)  None (candidate not yet proposed)    View
49411  CVE-2011-1499  Candidate  acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server.  Assigned (20110321)  None (candidate not yet proposed)    View
49667  CVE-2011-1755  Candidate  jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.  Assigned (20110419)  None (candidate not yet proposed)    View

Page 311 of 20943, showing 5 records out of 104715 total, starting on record 1551, ending on 1555

Actions