CVE List

Id CVE No. Status Description Phase Votes Comments Actions
71913  CVE-2014-4616  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20140624)  None (candidate not yet proposed)    View
6633  CVE-2002-2251  Candidate  Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote attackers to execute arbitrary code via a long argument.  Assigned (20071014)  None (candidate not yet proposed)    View
72169  CVE-2014-4872  Candidate  BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information via a .NET Remoting request to (1) FileStorageService or (2) ConfigurationService.  Assigned (20140710)  None (candidate not yet proposed)    View
6889  CVE-2003-0060  Candidate  Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in Kerberos principal names.  Modified (20040818)  ACCEPT(2) Baker, Green | MODIFY(2) Cox, Frech | NOOP(2) Cole, Wall  Cox> This is actually fixed in krb5 version 1.2.4 not 1.2.5 | Frech> XF:kerberos-kdc-format-string(11189)  View
72425  CVE-2014-5128  Candidate  Innovative Interfaces Encore Discovery Solution 4.3 places a session token in the URI, which might allow remote attackers to obtain sensitive information via unspecified vectors.  Assigned (20140730)  None (candidate not yet proposed)    View

Page 19121 of 20943, showing 5 records out of 104715 total, starting on record 95601, ending on 95605

Actions