CVE-2017-6445
Published Mar 5, 2017The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle a…
CWE archive
CWE-347 CVEs
Programmatic archive783 CVEs tagged with CWE-347 — 142 Critical, 338 High, 270 Medium, 33 Low, 0 Unrated.
CVE-2014-1498
Published Mar 19, 2014The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to caus…
CVE-2013-3900
Published Dec 11, 2013Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the…
- evidence mentions
- 8
- Buzz score
- 60.0
CVE-2011-3965
Published Feb 9, 2012Google Chrome before 17.0.963.46 does not properly check signatures, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
CVE-2005-2181
Published Jul 11, 2005Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers t…
CVE-2005-2182
Published Jul 11, 2005Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows rem…
CVE-2002-1706
Published Dec 31, 2002Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Sp…
- Buzz score
- 4.0
CVE-2002-1796
Published Dec 31, 2002ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauth…
- Buzz score
- 4.0
Showing 776-783 of 783 CVEsPage 32 of 32