CVE List

Id CVE No. Status Description Phase Votes Comments Actions
73471  CVE-2014-6172  Candidate  IBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics information in an encrypted form via unspecified vectors.  Assigned (20140902)  None (candidate not yet proposed)    View
8191  CVE-2003-1367  Candidate  The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command.  Assigned (20071016)  None (candidate not yet proposed)    View
73727  CVE-2014-6427  Candidate  Off-by-one error in the is_rtsp_request_or_reply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers parsing of a token located one position beyond the current position.  Assigned (20140916)  None (candidate not yet proposed)    View
8447  CVE-2004-0019  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20040106)  None (candidate not yet proposed)    View
73983  CVE-2014-6683  Candidate  The Open Electrical Webser (aka com.wOpenElectricalWeb) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  Assigned (20140919)  None (candidate not yet proposed)    View

Page 19715 of 20943, showing 5 records out of 104715 total, starting on record 98571, ending on 98575

Actions