CVE List

Id CVE No. Status Description Phase Votes Comments Actions
72203  CVE-2014-4906  Candidate  The Brisbane & Queensland Alert (aka com.queensland.alert) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  Assigned (20140710)  None (candidate not yet proposed)    View
6923  CVE-2003-0094  Entry  A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie to use an entropy source that is more predictable than expected, which may make it easier for certain types of attacks to succeed.        View
72459  CVE-2014-5162  Candidate  The read_new_line function in wiretap/catapult_dct2000.c in the Catapult DCT2000 dissector in Wireshark 1.10.x before 1.10.9 does not properly strip " " and " " characters, which allows remote attackers to cause a denial of service (off-by-one buffer underflow and application crash) via a crafted packet.  Assigned (20140731)  None (candidate not yet proposed)    View
7179  CVE-2003-0351  Candidate  ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2003-0306. Reason: This candidate is a reservation duplicate of CVE-2003-0306. Notes: All CVE users should reference CVE-2003-0306 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.  Assigned (20030528)  None (candidate not yet proposed)    View
72715  CVE-2014-5418  Candidate  GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.  Assigned (20140822)  None (candidate not yet proposed)    View

Page 897 of 20943, showing 5 records out of 104715 total, starting on record 4481, ending on 4485

Actions