CVE List

Id CVE No. Status Description Phase Votes Comments Actions
77055  CVE-2014-9754  Candidate  The hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does not validate the remote VPN endpoint identity (through the checking of the endpoint"s SSL key) before initiating the exchange, which allows an attacker to perform a Man in the Middle attack.  Assigned (20151102)  None (candidate not yet proposed)    View
11775  CVE-2005-0569  Candidate  Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) language parameter to register.php, (2) change email feature in profile.php, (3) posts or (4) topics parameter to moderate.php.  Assigned (20050227)  None (candidate not yet proposed)    View
77311  CVE-2015-0048  Candidate  Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0028.  Assigned (20141118)  None (candidate not yet proposed)    View
12031  CVE-2005-0825  Candidate  Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file.  Assigned (20050322)  None (candidate not yet proposed)    View
77567  CVE-2015-0304  Candidate  Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.  Assigned (20141201)  None (candidate not yet proposed)    View

Page 20880 of 20943, showing 5 records out of 104715 total, starting on record 104396, ending on 104400

Actions