CVE List

Id CVE No. Status Description Phase Votes Comments Actions
14094  CVE-2005-2888  Candidate  Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php.  Assigned (20050914)  None (candidate not yet proposed)    View
14095  CVE-2005-2889  Candidate  Check Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows remote attackers to bypass intended restrictions.  Assigned (20050914)  None (candidate not yet proposed)    View
14096  CVE-2005-2890  Candidate  SecureOL VE2 1.05.1008 does not properly restrict public access to physical memory, which allows local users to bypass intended restrictions and gain access to the secured environment via direct access to the PhysicalMemory device.  Assigned (20050914)  None (candidate not yet proposed)    View
14097  CVE-2005-2891  Candidate  WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows remote attackers to read or write to arbitrary files via the (1) MakeArchive or (2) MakeArchiveStr methods.  Assigned (20050914)  None (candidate not yet proposed)    View
14098  CVE-2005-2892  Candidate  Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to read arbitrary files via ".." sequences and "%00" (trailing null byte) in the u parameter.  Assigned (20050914)  None (candidate not yet proposed)    View

Page 18907 of 20943, showing 5 records out of 104715 total, starting on record 94531, ending on 94535

Actions