CVE List

Id CVE No. Status Description Phase Votes Comments Actions
8196  CVE-2003-1372  Candidate  Cross-site scripting (XSS) vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the (1) ratenum or (2) query parameters.  Assigned (20071016)  None (candidate not yet proposed)    View
73732  CVE-2014-6432  Candidate  The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not prevent data overwrites during copy operations, which allows remote attackers to cause a denial of service (application crash) via a crafted file.  Assigned (20140916)  None (candidate not yet proposed)    View
8452  CVE-2004-0024  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20040106)  None (candidate not yet proposed)    View
73988  CVE-2014-6688  Candidate  The Voices.com (aka com.voices.voices) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  Assigned (20140919)  None (candidate not yet proposed)    View
74244  CVE-2014-6944  Candidate  The mitfahrgelegenheit.at (aka com.carpooling.android.at) application 2.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  Assigned (20140919)  None (candidate not yet proposed)    View

Page 355 of 20943, showing 5 records out of 104715 total, starting on record 1771, ending on 1775

Actions