CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
12012 | CVE-2005-0806 | Candidate | Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages, possibly involving charsets in attachment filenames. | Assigned (20050320) | None (candidate not yet proposed) | View | |
77548 | CVE-2015-0285 | Candidate | The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and then conducting a brute-force attack. | Assigned (20141118) | None (candidate not yet proposed) | View | |
12268 | CVE-2005-1062 | Candidate | The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods. | Assigned (20050412) | None (candidate not yet proposed) | View | |
77804 | CVE-2015-0541 | Candidate | Cross-site request forgery (CSRF) vulnerability in EMC RSA Web Threat Detection before 5.1 allows remote attackers to hijack the authentication of arbitrary users. | Assigned (20141217) | None (candidate not yet proposed) | View | |
12524 | CVE-2005-1318 | Candidate | Cross-site scripting (XSS) vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent"s frame page title. | Assigned (20050427) | None (candidate not yet proposed) | View |
Page 19369 of 20943, showing 5 records out of 104715 total, starting on record 96841, ending on 96845