CVE List

Id CVE No. Status Description Phase Votes Comments Actions
67837  CVE-2014-0428  Candidate  Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox.  Assigned (20131212)  None (candidate not yet proposed)    View
2557  CVE-2000-0988  Candidate  WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration.  Proposed (20001129)  ACCEPT(4) Armstrong, Cole, Frech, Mell    View
68093  CVE-2014-0684  Candidate  Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136.  Assigned (20140102)  None (candidate not yet proposed)    View
2813  CVE-2000-1246  Candidate  NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend) by sending an RNTO command after a failed RNFR command.  Assigned (20100405)  None (candidate not yet proposed)    View
68349  CVE-2014-0940  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) REST API or (2) Self Service UI.  Assigned (20140106)  None (candidate not yet proposed)    View

Page 20708 of 20943, showing 5 records out of 104715 total, starting on record 103536, ending on 103540

Actions