CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
9638 | CVE-2004-1210 | Candidate | Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables. | Assigned (20041214) | None (candidate not yet proposed) | View | |
9639 | CVE-2004-1211 | Candidate | Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6) CLOSE, (7) EXPUNGE, (8) FETCH, (9) RENAME, (10) DELETE, (11) LIST, (12) SEARCH, (13) CREATE, or (14) UNSUBSCRIBE commands. | Assigned (20041214) | None (candidate not yet proposed) | View | |
9640 | CVE-2004-1212 | Candidate | Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbitrary files via a .. (dot dot) in the file argument. | Assigned (20041214) | None (candidate not yet proposed) | View | |
9641 | CVE-2004-1213 | Candidate | Cross-site scripting (XSS) vulnerability in index.php in Advanced Guestbook 2.3.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the entry parameter. | Assigned (20041214) | None (candidate not yet proposed) | View | |
9642 | CVE-2004-1214 | Candidate | Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in (1) a nickname or (2) message text. | Assigned (20041214) | None (candidate not yet proposed) | View |
Page 1018 of 20943, showing 5 records out of 104715 total, starting on record 5086, ending on 5090