CVE List

Id CVE No. Status Description Phase Votes Comments Actions
70255  CVE-2014-2960  Candidate  Vision Critical before 2014-05-30 allows attackers to read arbitrary files via unspecified vectors, as demonstrated by image files and configuration files.  Assigned (20140421)  None (candidate not yet proposed)    View
69225  CVE-2014-1930  Candidate  Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.  Assigned (20140210)  None (candidate not yet proposed)    View
43523  CVE-2010-0939  Candidate  Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb.  Assigned (20100308)  None (candidate not yet proposed)    View
35665  CVE-2008-5548  Candidate  VirusBuster 4.5.11.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.  Assigned (20081212)  None (candidate not yet proposed)    View
28611  CVE-2007-5254  Candidate  VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application programs, as demonstrated by replacing vba32ldr.exe.  Assigned (20071006)  None (candidate not yet proposed)    View

Page 533 of 20943, showing 5 records out of 104715 total, starting on record 2661, ending on 2665

Actions