CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
51968 | CVE-2011-4056 | Candidate | An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to create or overwrite arbitrary files via the save method. | Assigned (20111013) | None (candidate not yet proposed) | View | |
52224 | CVE-2011-4312 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) diff viewer or (2) screenshot component. | Assigned (20111104) | None (candidate not yet proposed) | View | |
52480 | CVE-2011-4568 | Candidate | Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI. | Assigned (20111128) | None (candidate not yet proposed) | View | |
52736 | CVE-2011-4824 | Candidate | SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the login_username parameter. | Assigned (20111214) | None (candidate not yet proposed) | View | |
52992 | CVE-2011-5080 | Candidate | Cross-site scripting (XSS) vulnerability in lib/class.tx_jftcaforms_tceFunc.php in the Additional TCA Forms (jftcaforms) extension before 0.2.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Assigned (20120214) | None (candidate not yet proposed) | View |
Page 70 of 20943, showing 5 records out of 104715 total, starting on record 346, ending on 350