NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
8914 | CVE-2011-2092 | Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly restrict creation of classes during deserialization of (1) AMF and (2) AMFX data, which allows attackers to have an unspecified impact via unknown vectors, related to a "deserialization vulnerability." | 2 | 10 | High | 2017-01-07 | 2011-09-06 | View | |
9170 | CVE-2011-2378 | The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to dereferencing of a "dangling pointer." | 2 | 10 | High | 2017-01-07 | 2012-05-02 | View | |
9682 | CVE-2011-2984 | Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the dropping of a tab element, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by establishing a content area and registering for drop events. | 2 | 10 | High | 2017-01-07 | 2012-05-03 | View | |
10706 | CVE-2011-4214 | OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to bypass authentication and obtain administrator privileges via a crafted oozimsrememberme cookie. | 2 | 10 | High | 2017-01-07 | 2012-01-26 | View | |
13266 | CVE-2010-1763 | Unspecified vulnerability in WebKit in Apple iTunes before 9.2 on Windows has unknown impact and attack vectors, a different vulnerability than CVE-2010-1387 and CVE-2010-1769. | 2 | 10 | High | 2017-01-18 | 2011-07-18 | View |
Page 1514 of 17672, showing 5 records out of 88360 total, starting on record 7566, ending on 7570