CVE List

Id CVE No. Status Description Phase Votes Comments Actions
20969  CVE-2006-4865  Candidate  Walter Beschmout PhpQuiz allows remote attackers to obtain sensitive information via a direct request to cfgphpquiz/install.php and other unspecified vectors.  Assigned (20060919)  None (candidate not yet proposed)    View
62243  CVE-2013-2296  Candidate  Walrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus, and SetBucketVersioningStatus bucket operations, which allows remote authenticated users to bypass intended restrictions on (1) modifying the logging setting, (2) modifying the versioning setting, or (3) accessing activity logs via a request.  Assigned (20130302)  None (candidate not yet proposed)    View
57310  CVE-2012-4067  Candidate  Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-logging request.  Assigned (20120726)  None (candidate not yet proposed)    View
49241  CVE-2011-1329  Candidate  WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which allows remote attackers to execute arbitrary PHP code via vectors involving a double extension, as demonstrated by a .php.zzz file.  Assigned (20110309)  None (candidate not yet proposed)    View
26694  CVE-2007-3337  Candidate  wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file.  Assigned (20070621)  None (candidate not yet proposed)    View

Page 409 of 20943, showing 5 records out of 104715 total, starting on record 2041, ending on 2045

Actions