CVE List

Id CVE No. Status Description Phase Votes Comments Actions
8187  CVE-2003-1363  Candidate  The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port (9999), which allows remote attackers to mount brute force attacks on the administration console without detection.  Assigned (20071016)  None (candidate not yet proposed)    View
73723  CVE-2014-6423  Candidate  The tvb_raw_text_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (infinite loop) via an empty line.  Assigned (20140916)  None (candidate not yet proposed)    View
73979  CVE-2014-6679  Candidate  The wEPISDParentPortal (aka com.dreamstep.wEPISDParentPortal) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  Assigned (20140919)  None (candidate not yet proposed)    View
74235  CVE-2014-6935  Candidate  The ColorMania - Color Quiz Game (aka com.ColormaniaColoringGames) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  Assigned (20140919)  None (candidate not yet proposed)    View
8955  CVE-2004-0527  Candidate  KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.  Assigned (20040603)  None (candidate not yet proposed)    View

Page 19407 of 20943, showing 5 records out of 104715 total, starting on record 97031, ending on 97035

Actions