CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
71702 | CVE-2014-4406 | Candidate | Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Assigned (20140620) | None (candidate not yet proposed) | View | |
6422 | CVE-2002-2040 | Candidate | The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the system command, which allows local users to execute arbitrary commands by modifying the PATH environment variable to reference a malicious crttrap program. | Assigned (20050714) | None (candidate not yet proposed) | View | |
71958 | CVE-2014-4661 | Candidate | Cross-site scripting (XSS) vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Assigned (20140625) | None (candidate not yet proposed) | View | |
6678 | CVE-2002-2296 | Candidate | Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote attackers to inject arbitrary web script or HTML via the num parameter. | Assigned (20071017) | None (candidate not yet proposed) | View | |
72214 | CVE-2014-4917 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20140711) | None (candidate not yet proposed) | View |
Page 1737 of 20943, showing 5 records out of 104715 total, starting on record 8681, ending on 8685