CVE List

Id CVE No. Status Description Phase Votes Comments Actions
10199  CVE-2004-1771  Candidate  Scalable OGo (SOGo) 1.0 allows remote authenticated users to bypass intended permissions and view private appointments of other users.  Assigned (20050326)  None (candidate not yet proposed)    View
12097  CVE-2005-0891  Candidate  Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.  Assigned (20050328)  None (candidate not yet proposed)    View
6018  CVE-2002-1634  Candidate  Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3) websinfo.bas, (4) ndslogin.pl, (5) volscgi.pl, (6) lancgi.pl, (7) test.jse, or (8) env.pl.  Assigned (20050328)  None (candidate not yet proposed)    View
6019  CVE-2002-1635  Candidate  The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin.  Assigned (20050328)  None (candidate not yet proposed)    View
6020  CVE-2002-1636  Candidate  Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print.  Assigned (20050328)  None (candidate not yet proposed)    View

Page 1339 of 20943, showing 5 records out of 104715 total, starting on record 6691, ending on 6695

Actions