CVE List

Id CVE No. Status Description Phase Votes Comments Actions
10555  CVE-2004-2129  Candidate  SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possibly triggering a buffer overflow.  Assigned (20050527)  None (candidate not yet proposed)    View
10554  CVE-2004-2128  Candidate  Cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as other users via the query string to ISAPISkeleton.dll.  Assigned (20050527)  None (candidate not yet proposed)    View
10553  CVE-2004-2127  Candidate  Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable.  Assigned (20050527)  None (candidate not yet proposed)    View
10552  CVE-2004-2126  Candidate  The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.ini, (2) firewall.ini, (3) protect.ini, or (4) sigs.ini, which allows local users to modify BlackICE configuration or possibly execute arbitrary code by exploiting vulnerabilities in the .INI parsers.  Assigned (20050527)  None (candidate not yet proposed)    View
10551  CVE-2004-2125  Candidate  Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.  Assigned (20050527)  None (candidate not yet proposed)    View

Page 18833 of 20943, showing 5 records out of 104715 total, starting on record 94161, ending on 94165

Actions