NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 46628 | CVE-2012-5500 | The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request. | 2 | 4.3 | Medium | 2017-01-19 | 2014-11-04 | View | |
| 46884 | CVE-2012-5860 | Unspecified vulnerability on Oberthur ID-One COSMO 5.2, 5.2a, and 64 smart cards makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging the generation of non-compliant public keys. | 2 | 4 | Medium | 2017-01-19 | 2012-11-19 | View | |
| 47140 | CVE-2012-6426 | LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass intended access-control restrictions via crafted SAML data. | 2 | 7.5 | High | 2017-01-19 | 2013-01-07 | View | |
| 47396 | CVE-2009-0050 | Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077. | 2 | 4.3 | Medium | 2017-01-07 | 2012-10-30 | View | |
| 47652 | CVE-2009-0320 | Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated by reading the I/O Other Bytes column in Task Manager (aka taskmgr.exe) to estimate the number of characters that a different user entered at a runas.exe password prompt, related to a "benchmarking attack." | 2 | 4 | Medium | 2017-01-07 | 2009-01-29 | View |
Page 2496 of 17672, showing 5 records out of 88360 total, starting on record 12476, ending on 12480