CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
10555 | CVE-2004-2129 | Candidate | SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possibly triggering a buffer overflow. | Assigned (20050527) | None (candidate not yet proposed) | View | |
10554 | CVE-2004-2128 | Candidate | Cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as other users via the query string to ISAPISkeleton.dll. | Assigned (20050527) | None (candidate not yet proposed) | View | |
10553 | CVE-2004-2127 | Candidate | Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable. | Assigned (20050527) | None (candidate not yet proposed) | View | |
10552 | CVE-2004-2126 | Candidate | The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.ini, (2) firewall.ini, (3) protect.ini, or (4) sigs.ini, which allows local users to modify BlackICE configuration or possibly execute arbitrary code by exploiting vulnerabilities in the .INI parsers. | Assigned (20050527) | None (candidate not yet proposed) | View | |
10551 | CVE-2004-2125 | Candidate | Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value. | Assigned (20050527) | None (candidate not yet proposed) | View |
Page 18833 of 20943, showing 5 records out of 104715 total, starting on record 94161, ending on 94165