CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
66832 | CVE-2013-6885 | Candidate | The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service (system hang) via a crafted application, aka the errata 793 issue. | Assigned (20131127) | None (candidate not yet proposed) | View | |
1552 | CVE-1999-1572 | Candidate | cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files. | Assigned (20050127) | None (candidate not yet proposed) | View | |
67088 | CVE-2013-7141 | Candidate | Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to crafted "<%" tags. | Assigned (20131218) | None (candidate not yet proposed) | View | |
67344 | CVE-2013-7397 | Candidate | Async Http Client (aka AHC or async-http-client) before 1.9.0 skips X.509 certificate verification unless both a keyStore location and a trustStore location are explicitly set, which allows man-in-the-middle attackers to spoof HTTPS servers by presenting an arbitrary certificate during use of a typical AHC configuration, as demonstrated by a configuration that does not send client certificates. | Assigned (20140825) | None (candidate not yet proposed) | View | |
67600 | CVE-2014-0191 | Candidate | The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document. | Assigned (20131203) | None (candidate not yet proposed) | View |
Page 1276 of 20943, showing 5 records out of 104715 total, starting on record 6376, ending on 6380