CVE List

Id CVE No. Status Description Phase Votes Comments Actions
73215  CVE-2014-5916  Candidate  The Minha Oi (aka br.com.mobicare.minhaoi) application 1.15.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  Assigned (20140830)  None (candidate not yet proposed)    View
7935  CVE-2003-1111  Candidate  The Session Initiation Protocol (SIP) implementation in multiple dynamicsoft products including y and certain demo products for AppEngine allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.  Assigned (20050311)  None (candidate not yet proposed)    View
73471  CVE-2014-6172  Candidate  IBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics information in an encrypted form via unspecified vectors.  Assigned (20140902)  None (candidate not yet proposed)    View
8191  CVE-2003-1367  Candidate  The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command.  Assigned (20071016)  None (candidate not yet proposed)    View
73727  CVE-2014-6427  Candidate  Off-by-one error in the is_rtsp_request_or_reply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers parsing of a token located one position beyond the current position.  Assigned (20140916)  None (candidate not yet proposed)    View

Page 20874 of 20943, showing 5 records out of 104715 total, starting on record 104366, ending on 104370

Actions