CVE List

Id CVE No. Status Description Phase Votes Comments Actions
10241  CVE-2004-1814  Candidate  Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via .. (dot dot) sequences in an HTTP request, as demonstrated using home.asp.  Assigned (20050504)  None (candidate not yet proposed)    View
75777  CVE-2014-8476  Candidate  The setlogin function in FreeBSD 8.4 through 10.1-RC4 does not initialize the buffer used to store the login name, which allows local users to obtain sensitive information from kernel memory via a call to getlogin, which returns the entire buffer.  Assigned (20141024)  None (candidate not yet proposed)    View
10497  CVE-2004-2071  Candidate  Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after the server name.  Assigned (20050519)  None (candidate not yet proposed)    View
76033  CVE-2014-8732  Candidate  Cross-site scripting (XSS) vulnerability in phpMemcachedAdmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  Assigned (20141110)  None (candidate not yet proposed)    View
10753  CVE-2004-2327  Candidate  Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service (crash) via multiple malformed requests including (1) requests without GET, (2) GET requests without HTTP, (3) or long GET requests.  Assigned (20050816)  None (candidate not yet proposed)    View

Page 126 of 20943, showing 5 records out of 104715 total, starting on record 626, ending on 630

Actions