CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
10476 | CVE-2004-2050 | Candidate | eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the "maertsJ" password, which is hard-coded into lshell. | Assigned (20050504) | None (candidate not yet proposed) | View | |
10221 | CVE-2004-1793 | Candidate | Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm. | Assigned (20050504) | None (candidate not yet proposed) | View | |
10477 | CVE-2004-2051 | Candidate | The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL. | Assigned (20050504) | None (candidate not yet proposed) | View | |
10222 | CVE-2004-1794 | Candidate | Cross-site scripting (XSS) vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard. | Assigned (20050504) | None (candidate not yet proposed) | View | |
10478 | CVE-2004-2052 | Candidate | eSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins with the actual password, which makes it easier for users to conduct brute force password guessing. | Assigned (20050504) | None (candidate not yet proposed) | View |
Page 1535 of 20943, showing 5 records out of 104715 total, starting on record 7671, ending on 7675