CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
10199 | CVE-2004-1771 | Candidate | Scalable OGo (SOGo) 1.0 allows remote authenticated users to bypass intended permissions and view private appointments of other users. | Assigned (20050326) | None (candidate not yet proposed) | View | |
12097 | CVE-2005-0891 | Candidate | Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image. | Assigned (20050328) | None (candidate not yet proposed) | View | |
6018 | CVE-2002-1634 | Candidate | Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3) websinfo.bas, (4) ndslogin.pl, (5) volscgi.pl, (6) lancgi.pl, (7) test.jse, or (8) env.pl. | Assigned (20050328) | None (candidate not yet proposed) | View | |
6019 | CVE-2002-1635 | Candidate | The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin. | Assigned (20050328) | None (candidate not yet proposed) | View | |
6020 | CVE-2002-1636 | Candidate | Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print. | Assigned (20050328) | None (candidate not yet proposed) | View |
Page 1339 of 20943, showing 5 records out of 104715 total, starting on record 6691, ending on 6695