CVE List

Id CVE No. Status Description Phase Votes Comments Actions
12009  CVE-2005-0803  Candidate  The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability."  Assigned (20050320)  None (candidate not yet proposed)    View
12010  CVE-2005-0804  Candidate  Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) via format string specifiers in the mailto field.  Assigned (20050320)  None (candidate not yet proposed)    View
12011  CVE-2005-0805  Candidate  SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demonstrated using the imageid parameter, which is not properly handled by imagegallery.php.  Assigned (20050320)  None (candidate not yet proposed)    View
12012  CVE-2005-0806  Candidate  Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages, possibly involving charsets in attachment filenames.  Assigned (20050320)  None (candidate not yet proposed)    View
12013  CVE-2005-0807  Candidate  Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.  Assigned (20050320)  None (candidate not yet proposed)    View

Page 1313 of 20943, showing 5 records out of 104715 total, starting on record 6561, ending on 6565

Actions