NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 46370 | CVE-2012-5158 | Puppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenticated users to retain access via unspecified vectors. | 2 | 4 | Medium | 2017-01-19 | 2014-03-25 | View | |
| 46626 | CVE-2012-5498 | queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection. | 2 | 5 | Medium | 2017-01-19 | 2015-11-17 | View | |
| 46882 | CVE-2012-5858 | Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the IP address. | 2 | 4.3 | Medium | 2017-01-19 | 2012-12-04 | View | |
| 47138 | CVE-2012-6399 | Cisco WebEx 4.1 on iOS does not verify that the server hostname matches a domain name in the subject"s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, aka Bug ID CSCud94176. | 2 | 5.8 | Medium | 2017-01-19 | 2013-05-28 | View | |
| 47394 | CVE-2009-0048 | OpenEvidence 1.0.6 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077. | 2 | 5 | Medium | 2017-01-07 | 2012-10-30 | View |
Page 2091 of 17672, showing 5 records out of 88360 total, starting on record 10451, ending on 10455
