CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
15289 | CVE-2005-4085 | Candidate | Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header. | Assigned (20051208) | None (candidate not yet proposed) | View | |
15290 | CVE-2005-4086 | Candidate | Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter. | Assigned (20051208) | None (candidate not yet proposed) | View | |
15291 | CVE-2005-4087 | Candidate | PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter. | Assigned (20051208) | None (candidate not yet proposed) | View | |
15292 | CVE-2005-4088 | Candidate | SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters. | Assigned (20051208) | None (candidate not yet proposed) | View | |
15293 | CVE-2005-4089 | Candidate | Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets (CSS) files, as demonstrated using Google Desktop, aka "CSSXSS" and "CSS Cross-Domain Information Disclosure Vulnerability." | Assigned (20051208) | None (candidate not yet proposed) | View |
Page 18605 of 20943, showing 5 records out of 104715 total, starting on record 93021, ending on 93025