CVE List

Id CVE No. Status Description Phase Votes Comments Actions
64005  CVE-2013-4058  Candidate  Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote authenticated users to execute arbitrary SQL commands via unspecified interfaces.  Assigned (20130607)  None (candidate not yet proposed)    View
64261  CVE-2013-4314  Candidate  The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a "" character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.  Assigned (20130612)  None (candidate not yet proposed)    View
64517  CVE-2013-4570  Candidate  The zend_inline_hash_func function in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to converting Lua data structures to PHP, as demonstrated by passing { [{}] = 1 } to a module function.  Assigned (20130612)  None (candidate not yet proposed)    View
64773  CVE-2013-4826  Candidate  Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647.  Assigned (20130712)  None (candidate not yet proposed)    View
65029  CVE-2013-5082  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20130806)  None (candidate not yet proposed)    View

Page 500 of 20943, showing 5 records out of 104715 total, starting on record 2496, ending on 2500

Actions