CVE List

Id CVE No. Status Description Phase Votes Comments Actions
15289  CVE-2005-4085  Candidate  Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.  Assigned (20051208)  None (candidate not yet proposed)    View
15290  CVE-2005-4086  Candidate  Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter.  Assigned (20051208)  None (candidate not yet proposed)    View
15291  CVE-2005-4087  Candidate  PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter.  Assigned (20051208)  None (candidate not yet proposed)    View
15292  CVE-2005-4088  Candidate  SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters.  Assigned (20051208)  None (candidate not yet proposed)    View
15293  CVE-2005-4089  Candidate  Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets (CSS) files, as demonstrated using Google Desktop, aka "CSSXSS" and "CSS Cross-Domain Information Disclosure Vulnerability."  Assigned (20051208)  None (candidate not yet proposed)    View

Page 18605 of 20943, showing 5 records out of 104715 total, starting on record 93021, ending on 93025

Actions