CVE List

Id CVE No. Status Description Phase Votes Comments Actions
14321  CVE-2005-3115  Candidate  mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via (1) ts.stat, (2) ts.mpg, (3) foobar, (4) blockbar, or (5) foobar[NNN].  Assigned (20050930)  None (candidate not yet proposed)    View
14322  CVE-2005-3116  Candidate  Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.  Assigned (20050930)  None (candidate not yet proposed)    View
14294  CVE-2005-3088  Candidate  fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.  Assigned (20050928)  None (candidate not yet proposed)    View
14295  CVE-2005-3089  Candidate  Firefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC) script that uses an eval statement. NOTE: it is not clear whether an untrusted party has any role in triggering this issue, so it might not be a vulnerability.  Assigned (20050928)  None (candidate not yet proposed)    View
14296  CVE-2005-3090  Candidate  Cross-site scripting (XSS) vulnerability in bug_actiongroup_page.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the summary of the bug, which is not quoted when view_all_bug_page.php is used to delete the bug, as identified by bug#0006002, a different vulnerability than CVE-2005-2557.  Assigned (20050928)  None (candidate not yet proposed)    View

Page 18867 of 20943, showing 5 records out of 104715 total, starting on record 94331, ending on 94335

Actions