CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 8191 | CVE-2003-1367 | Candidate | The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command. | Assigned (20071016) | None (candidate not yet proposed) | View | |
| 73727 | CVE-2014-6427 | Candidate | Off-by-one error in the is_rtsp_request_or_reply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers parsing of a token located one position beyond the current position. | Assigned (20140916) | None (candidate not yet proposed) | View | |
| 8447 | CVE-2004-0019 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20040106) | None (candidate not yet proposed) | View | |
| 73983 | CVE-2014-6683 | Candidate | The Open Electrical Webser (aka com.wOpenElectricalWeb) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | Assigned (20140919) | None (candidate not yet proposed) | View | |
| 8703 | CVE-2004-0275 | Candidate | SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter. | Proposed (20040318) | NOOP(4) Armstrong, Cole, Cox, Wall | View |
Page 20264 of 20943, showing 5 records out of 104715 total, starting on record 101316, ending on 101320
