CVE List

Id CVE No. Status Description Phase Votes Comments Actions
3086  CVE-2001-0265  Entry  ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file.        View
68622  CVE-2014-1327  Candidate  WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1.  Assigned (20140108)  None (candidate not yet proposed)    View
3342  CVE-2001-0528  Entry  Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges.        View
68878  CVE-2014-1583  Candidate  The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, which allows remote attackers to bypass the Same Origin Policy via crafted API calls that access sensitive information within the JSON data of an alarm.  Assigned (20140116)  None (candidate not yet proposed)    View
69134  CVE-2014-1839  Candidate  The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.  Assigned (20140202)  None (candidate not yet proposed)    View

Page 1133 of 20943, showing 5 records out of 104715 total, starting on record 5661, ending on 5665

Actions