CVE List

Id CVE No. Status Description Phase Votes Comments Actions
69886  CVE-2014-2591  Candidate  Untrusted search path vulnerability in BMC Patrol for AIX 3.9.00 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting.  Assigned (20140324)  None (candidate not yet proposed)    View
4606  CVE-2002-0214  Candidate  Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalent Privacy) key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key.  Proposed (20020502)  ACCEPT(1) Green | NOOP(3) Cole, Foat, Wall    View
70142  CVE-2014-2847  Candidate  SQL injection vulnerability in default.asp in CIS Manager CMS allows remote attackers to execute arbitrary SQL commands via the TroncoID parameter.  Assigned (20140411)  None (candidate not yet proposed)    View
4862  CVE-2002-0470  Candidate  PHPNetToolpack 0.1 relies on its environment"s PATH to find and execute the traceroute program, which could allow local users to gain privileges by inserting a Trojan horse program into the search path.  Modified (20080918)  ACCEPT(1) Frech | NOOP(5) Cole, Cox, Foat, Green, Wall    View
70398  CVE-2014-3103  Candidate  The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.  Assigned (20140429)  None (candidate not yet proposed)    View

Page 20790 of 20943, showing 5 records out of 104715 total, starting on record 103946, ending on 103950

Actions