CVE List

Id CVE No. Status Description Phase Votes Comments Actions
68335  CVE-2014-0926  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20140106)  None (candidate not yet proposed)    View
68591  CVE-2014-1296  Candidate  CFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does not ensure that a Set-Cookie HTTP header is complete before interpreting the header"s value, which allows remote attackers to bypass intended access restrictions by triggering the closing of a TCP connection during transmission of a header, as demonstrated by an HTTPOnly restriction.  Assigned (20140108)  None (candidate not yet proposed)    View
68847  CVE-2014-1552  Candidate  Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to bypass intended restrictions on same-origin content via a crafted web site in conjunction with a redirect.  Assigned (20140116)  None (candidate not yet proposed)    View
69103  CVE-2014-1808  Candidate  Microsoft Office 2013 Gold, SP1, RT, and RT SP1 allows remote attackers to obtain sensitive token information via a web site that sends a crafted response during opening of an Office document, aka "Token Reuse Vulnerability."  Assigned (20140129)  None (candidate not yet proposed)    View
3823  CVE-2001-1019  Candidate  Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter.  Proposed (20020131)  ACCEPT(2) Frech, Green | NOOP(3) Cole, Foat, Wall    View

Page 18984 of 20943, showing 5 records out of 104715 total, starting on record 94916, ending on 94920

Actions