CVE List

Id CVE No. Status Description Phase Votes Comments Actions
33264  CVE-2008-3147  Candidate  WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores (1) WEP, (2) WPA, and (3) WPA2 access-point keys in (a) ClientWeFiLog.dat, (b) ClientWeFiLog.bak, and possibly (c) a certain .inf file under %PROGRAMFILES%WeFiUsers, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain sensitive information by reading these files.  Assigned (20080711)  None (candidate not yet proposed)    View
38096  CVE-2009-0661  Candidate  Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an IRC PRIVMSG command containing crafted color codes that trigger an out-of-bounds read.  Assigned (20090222)  None (candidate not yet proposed)    View
49340  CVE-2011-1428  Candidate  Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL chat server via an arbitrary certificate, related to incorrect use of the GnuTLS API.  Assigned (20110316)  None (candidate not yet proposed)    View
9162  CVE-2004-0734  Candidate  Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.  Assigned (20040722)  None (candidate not yet proposed)    View
69616  CVE-2014-2321  Candidate  web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials.  Assigned (20140310)  None (candidate not yet proposed)    View

Page 227 of 20943, showing 5 records out of 104715 total, starting on record 1131, ending on 1135

Actions