CVE List

Id CVE No. Status Description Phase Votes Comments Actions
73973  CVE-2014-6673  Candidate  The ChallengerTX (aka com.zhtiantian.ChallengerTX) application 3.9.12.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  Assigned (20140919)  None (candidate not yet proposed)    View
74229  CVE-2014-6929  Candidate  The AIHce 2014 (aka com.coreapps.android.followme.aihce2014) application 6.1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  Assigned (20140919)  None (candidate not yet proposed)    View
8949  CVE-2004-0521  Candidate  SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.  Assigned (20040602)  None (candidate not yet proposed)    View
74485  CVE-2014-7185  Candidate  Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.  Assigned (20140925)  None (candidate not yet proposed)    View
9205  CVE-2004-0777  Candidate  Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code.  Assigned (20040811)  None (candidate not yet proposed)    View

Page 20068 of 20943, showing 5 records out of 104715 total, starting on record 100336, ending on 100340

Actions