CVE List

Id CVE No. Status Description Phase Votes Comments Actions
77322  CVE-2015-0059  Candidate  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted TrueType font, aka "TrueType Font Parsing Remote Code Execution Vulnerability."  Assigned (20141118)  None (candidate not yet proposed)    View
12042  CVE-2005-0836  Candidate  Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file.  Assigned (20050322)  None (candidate not yet proposed)    View
77578  CVE-2015-0315  Candidate  Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and CVE-2015-0322.  Assigned (20141201)  None (candidate not yet proposed)    View
12298  CVE-2005-1092  Candidate  Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.  Assigned (20050413)  None (candidate not yet proposed)    View
77834  CVE-2015-0571  Candidate  The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not verify authorization for private SET IOCTL calls, which allows attackers to gain privileges via a crafted application, related to wlan_hdd_hostapd.c and wlan_hdd_wext.c.  Assigned (20150107)  None (candidate not yet proposed)    View

Page 824 of 20943, showing 5 records out of 104715 total, starting on record 4116, ending on 4120

Actions