CVE List

Id CVE No. Status Description Phase Votes Comments Actions
78358  CVE-2015-1081  Candidate  WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.  Assigned (20150116)  None (candidate not yet proposed)    View
13078  CVE-2005-1872  Candidate  Buffer overflow in the administrative console in IBM WebSphere Application Server 5.x, when the global security option is enabled, allows remote attackers to execute arbitrary code.  Assigned (20050608)  None (candidate not yet proposed)    View
78614  CVE-2015-1337  Candidate  Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka Forbidden) response.  Assigned (20150122)  None (candidate not yet proposed)    View
13334  CVE-2005-2128  Candidate  QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value.  Assigned (20050702)  None (candidate not yet proposed)    View
78870  CVE-2015-1593  Candidate  The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, which makes it easier for attackers to bypass the ASLR protection mechanism by predicting the address of the top of the stack, related to the randomize_stack_top function in fs/binfmt_elf.c and the stack_maxrandom_size function in arch/x86/mm/mmap.c.  Assigned (20150213)  None (candidate not yet proposed)    View

Page 1747 of 20943, showing 5 records out of 104715 total, starting on record 8731, ending on 8735

Actions