CVE List

Id CVE No. Status Description Phase Votes Comments Actions
72984  CVE-2014-5686  Candidate  The Runtastic Me (aka com.runtastic.android.me.lite) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  Assigned (20140830)  None (candidate not yet proposed)    View
7704  CVE-2003-0880  Candidate  Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from behind Screen Effects when Full Keyboard Access is enabled using the Keyboard pane in System Preferences.  Assigned (20031024)  None (candidate not yet proposed)    View
73240  CVE-2014-5941  Candidate  The Armpit Spa & Girl Games (aka com.freegames.spamakeover) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  Assigned (20140830)  None (candidate not yet proposed)    View
7960  CVE-2003-1136  Candidate  Cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers to inject arbitrary web script or HTML via (1) HTML in a posted message or (2) Javascript in an onmouseover attribute in an e-mail address or URL.  Assigned (20050504)  None (candidate not yet proposed)    View
73496  CVE-2014-6197  Candidate  IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers to conduct clickjacking attacks via unspecified vectors.  Assigned (20140902)  None (candidate not yet proposed)    View

Page 1919 of 20943, showing 5 records out of 104715 total, starting on record 9591, ending on 9595

Actions