CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 69895 | CVE-2014-2600 | Candidate | Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors. | Assigned (20140324) | None (candidate not yet proposed) | View | |
| 70151 | CVE-2014-2856 | Candidate | Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function. | Assigned (20140415) | None (candidate not yet proposed) | View | |
| 70407 | CVE-2014-3112 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20140429) | None (candidate not yet proposed) | View | |
| 70663 | CVE-2014-3367 | Candidate | Cross-site scripting (XSS) vulnerability in the vCloud Director component in Cisco Nexus 1000V InterCloud for VMware allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq90524. | Assigned (20140507) | None (candidate not yet proposed) | View | |
| 70919 | CVE-2014-3623 | Candidate | Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors. | Assigned (20140514) | None (candidate not yet proposed) | View |
Page 582 of 20943, showing 5 records out of 104715 total, starting on record 2906, ending on 2910
