CVE List

Id CVE No. Status Description Phase Votes Comments Actions
9456  CVE-2004-1028  Candidate  Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.  Assigned (20041112)  None (candidate not yet proposed)    View
74992  CVE-2014-7691  Candidate  The Life Story of Sheikh Mujib (aka com.wbongobondho) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  Assigned (20141003)  None (candidate not yet proposed)    View
9712  CVE-2004-1284  Candidate  Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist.  Assigned (20041220)  None (candidate not yet proposed)    View
75248  CVE-2014-7947  Candidate  OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, pi.c, t1.c, t2.c, and tcd.c.  Assigned (20141006)  None (candidate not yet proposed)    View
9968  CVE-2004-1540  Candidate  ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file.  Assigned (20050218)  None (candidate not yet proposed)    View

Page 19675 of 20943, showing 5 records out of 104715 total, starting on record 98371, ending on 98375

Actions