CVE List

Id CVE No. Status Description Phase Votes Comments Actions
15294  CVE-2005-4090  Candidate  Unspecified vulnerability in HP-UX B.11.00 to B.11.23, when IPSEC is running, allows remote attackers to have unknown impact.  Assigned (20051208)  None (candidate not yet proposed)    View
15295  CVE-2005-4091  Candidate  Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or HTML via the q parameter.  Assigned (20051208)  None (candidate not yet proposed)    View
15296  CVE-2005-4092  Candidate  Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a .mov file with (1) a Movie Resource atom with a large size value, or (2) an stsd atom with a modified Sample Description Table size value, and possibly other vectors involving media files. NOTE: item 1 was originally identified by CVE-2005-4127 for a pre-patch announcement, and item 2 was originally identified by CVE-2005-4128 for a pre-patch announcement.  Assigned (20051208)  None (candidate not yet proposed)    View
15297  CVE-2005-4093  Candidate  Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modifying the local copy of the local.scv policy file after it has been downloaded from the VPN Endpoint.  Assigned (20051208)  None (candidate not yet proposed)    View
15298  CVE-2005-4094  Candidate  connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script.  Assigned (20051208)  None (candidate not yet proposed)    View

Page 18606 of 20943, showing 5 records out of 104715 total, starting on record 93026, ending on 93030

Actions