CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
71682 | CVE-2014-4386 | Candidate | Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access. | Assigned (20140620) | None (candidate not yet proposed) | View | |
6402 | CVE-2002-2020 | Candidate | Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26 uses a default administrator password and accepts admin logins on the external interface, which allows remote attackers to gain privileges if the password is not changed. | Assigned (20050714) | None (candidate not yet proposed) | View | |
71938 | CVE-2014-4641 | Candidate | ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2014. Notes: none. | Assigned (20140624) | None (candidate not yet proposed) | View | |
6658 | CVE-2002-2276 | Candidate | Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message. | Assigned (20071017) | None (candidate not yet proposed) | View | |
72194 | CVE-2014-4897 | Candidate | The Touriosity Travelmag (aka com.magzter.touriositytravelmag) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | Assigned (20140710) | None (candidate not yet proposed) | View |
Page 168 of 20943, showing 5 records out of 104715 total, starting on record 836, ending on 840