CVE List

Id CVE No. Status Description Phase Votes Comments Actions
9638  CVE-2004-1210  Candidate  Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables.  Assigned (20041214)  None (candidate not yet proposed)    View
9639  CVE-2004-1211  Candidate  Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6) CLOSE, (7) EXPUNGE, (8) FETCH, (9) RENAME, (10) DELETE, (11) LIST, (12) SEARCH, (13) CREATE, or (14) UNSUBSCRIBE commands.  Assigned (20041214)  None (candidate not yet proposed)    View
9640  CVE-2004-1212  Candidate  Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbitrary files via a .. (dot dot) in the file argument.  Assigned (20041214)  None (candidate not yet proposed)    View
9641  CVE-2004-1213  Candidate  Cross-site scripting (XSS) vulnerability in index.php in Advanced Guestbook 2.3.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the entry parameter.  Assigned (20041214)  None (candidate not yet proposed)    View
9642  CVE-2004-1214  Candidate  Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in (1) a nickname or (2) message text.  Assigned (20041214)  None (candidate not yet proposed)    View

Page 1018 of 20943, showing 5 records out of 104715 total, starting on record 5086, ending on 5090

Actions