CVE List

Id CVE No. Status Description Phase Votes Comments Actions
71679  CVE-2014-4383  Candidate  The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device"s update status via a crafted Last-Modified HTTP response header.  Assigned (20140620)  None (candidate not yet proposed)    View
6399  CVE-2002-2017  Candidate  sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd.  Assigned (20050714)  None (candidate not yet proposed)    View
71935  CVE-2014-4638  Candidate  EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to conduct frame-injection attacks and obtain sensitive information via unspecified vectors.  Assigned (20140624)  None (candidate not yet proposed)    View
6655  CVE-2002-2273  Candidate  Cross-site scripting (XSS) vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL.  Assigned (20071017)  None (candidate not yet proposed)    View
72191  CVE-2014-4894  Candidate  The MyMetro (aka com.myrippleapps.mymetro) application 2.4.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  Assigned (20140710)  None (candidate not yet proposed)    View

Page 20261 of 20943, showing 5 records out of 104715 total, starting on record 101301, ending on 101305

Actions