CVE List

Id CVE No. Status Description Phase Votes Comments Actions
63750  CVE-2013-3803  Candidate  Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3, 11.1.1.4.107 and earlier, 11.1.2.1.129 and earlier, and 11.1.2.2.305 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Intelligence Service.  Assigned (20130603)  None (candidate not yet proposed)    View
64006  CVE-2013-4059  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified interfaces.  Assigned (20130607)  None (candidate not yet proposed)    View
64262  CVE-2013-4315  Candidate  Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWED_INCLUDE_ROOTS setting followed by a .. (dot dot) in a ssi template tag.  Assigned (20130612)  None (candidate not yet proposed)    View
64518  CVE-2013-4571  Candidate  Buffer overflow in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 has unspecified impact and remote vectors.  Assigned (20130612)  None (candidate not yet proposed)    View
64774  CVE-2013-4827  Candidate  SQL injection vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZDI-CAN-1664.  Assigned (20130712)  None (candidate not yet proposed)    View

Page 577 of 20943, showing 5 records out of 104715 total, starting on record 2881, ending on 2885

Actions