CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
70255 | CVE-2014-2960 | Candidate | Vision Critical before 2014-05-30 allows attackers to read arbitrary files via unspecified vectors, as demonstrated by image files and configuration files. | Assigned (20140421) | None (candidate not yet proposed) | View | |
69225 | CVE-2014-1930 | Candidate | Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation. | Assigned (20140210) | None (candidate not yet proposed) | View | |
43523 | CVE-2010-0939 | Candidate | Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb. | Assigned (20100308) | None (candidate not yet proposed) | View | |
35665 | CVE-2008-5548 | Candidate | VirusBuster 4.5.11.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. | Assigned (20081212) | None (candidate not yet proposed) | View | |
28611 | CVE-2007-5254 | Candidate | VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application programs, as demonstrated by replacing vba32ldr.exe. | Assigned (20071006) | None (candidate not yet proposed) | View |
Page 533 of 20943, showing 5 records out of 104715 total, starting on record 2661, ending on 2665