CVE List

Id CVE No. Status Description Phase Votes Comments Actions
12594  CVE-2005-1388  Candidate  Cross-site scripting (XSS) vulnerability in SURVIVOR before 0.9.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.  Assigned (20050502)  None (candidate not yet proposed)    View
12595  CVE-2005-1389  Candidate  ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0175. Reason: This candidate is a duplicate of CVE-2005-0175. Notes: All CVE users should reference CVE-2005-0175 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.  Assigned (20050502)  None (candidate not yet proposed)    View
12596  CVE-2005-1390  Candidate  ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0174. Reason: This candidate is a duplicate of CVE-2005-0174. Notes: All CVE users should reference CVE-2005-0174 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.  Assigned (20050502)  None (candidate not yet proposed)    View
12597  CVE-2005-1391  Candidate  Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header.  Assigned (20050502)  None (candidate not yet proposed)    View
12598  CVE-2005-1392  Candidate  The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script.  Assigned (20050502)  None (candidate not yet proposed)    View

Page 1457 of 20943, showing 5 records out of 104715 total, starting on record 7281, ending on 7285

Actions