NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
43530  CVE-2012-1658  Cross-site scripting (XSS) vulnerability in the Read More Link module 6.x-3.x before 6.x-3.1 for Drupal allows remote authenticated users with the access administration pages permission to inject arbitrary web script or HTML via unspecified vectors.    2.1  Low  2017-01-19  2012-09-19  View
45322  CVE-2012-3740  The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors.    2.1  Low  2017-01-19  2012-09-21  View
5643  CVE-2008-5912  An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an "in-session phishing attack." NOTE: as of 20090116, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.    2.1  Low  2017-01-03  2009-01-29  View
71179  CVE-2004-0752  OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.    2.1  Low  2017-07-18  2017-07-10  View
74507  CVE-2003-1437  BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access.    2.1  Low  2017-01-03  2008-09-05  View

Page 1768 of 17672, showing 5 records out of 88360 total, starting on record 8836, ending on 8840

Actions