CVE List

Id CVE No. Status Description Phase Votes Comments Actions
72206  CVE-2014-4909  Candidate  Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.  Assigned (20140711)  None (candidate not yet proposed)    View
72462  CVE-2014-5165  Candidate  The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet.  Assigned (20140731)  None (candidate not yet proposed)    View
7182  CVE-2003-0354  Candidate  Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.  Assigned (20030529)  None (candidate not yet proposed)    View
72718  CVE-2014-5421  Candidate  CareFusion Pyxis SupplyStation 8.1 with hardware test tool 1.0.16 and earlier has a hardcoded database password, which makes it easier for local users to gain privileges by leveraging cabinet access.  Assigned (20140822)  None (candidate not yet proposed)    View
7438  CVE-2003-0611  Candidate  Multiple buffer overflows in xtokkaetama 1.0 allow local users to gain privileges via a long (1) -display command line argument or (2) XTOKKAETAMADIR environment variable.  Assigned (20030728)  None (candidate not yet proposed)    View

Page 1735 of 20943, showing 5 records out of 104715 total, starting on record 8671, ending on 8675

Actions