CVE List

Id CVE No. Status Description Phase Votes Comments Actions
75782  CVE-2014-8481  Candidate  The instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before 3.18-rc2 does not properly handle invalid instructions, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via a crafted application that triggers (1) an improperly fetched instruction or (2) an instruction that occupies too many bytes. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8480.  Assigned (20141024)  None (candidate not yet proposed)    View
10502  CVE-2004-2076  Candidate  Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the query parameter.  Assigned (20050519)  None (candidate not yet proposed)    View
76038  CVE-2014-8737  Candidate  Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot) or full path name in an archive to ar.  Assigned (20141113)  None (candidate not yet proposed)    View
10758  CVE-2004-2332  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in CPAN WWW::Form before 1.13 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.  Assigned (20050816)  None (candidate not yet proposed)    View
76294  CVE-2014-8993  Candidate  Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev40, 7.6.0 before 7.6.0-rev32, and 7.6.1 before 7.6.1-rev11 allows remote attackers to inject arbitrary web script or HTML via a crafted XHTML file with the application/xhtml+xml MIME type.  Assigned (20141119)  None (candidate not yet proposed)    View

Page 495 of 20943, showing 5 records out of 104715 total, starting on record 2471, ending on 2475

Actions