CVE List

Id CVE No. Status Description Phase Votes Comments Actions
58121  CVE-2012-4878  Candidate  Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action.  Assigned (20120906)  None (candidate not yet proposed)    View
58377  CVE-2012-5134  Candidate  Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.  Assigned (20120924)  None (candidate not yet proposed)    View
58633  CVE-2012-5390  Candidate  The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job.  Assigned (20121017)  None (candidate not yet proposed)    View
58889  CVE-2012-5646  Candidate  node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH_INFO.  Assigned (20121024)  None (candidate not yet proposed)    View
59145  CVE-2012-5902  Candidate  Cross-site scripting (XSS) vulnerability in ptk/lib/modal_bookmark.php in DFLabs PTK 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the arg4 parameter.  Assigned (20121117)  None (candidate not yet proposed)    View

Page 801 of 20943, showing 5 records out of 104715 total, starting on record 4001, ending on 4005

Actions