CVE List

Id CVE No. Status Description Phase Votes Comments Actions
9945  CVE-2004-1517  Candidate  Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a URL with hex encoded file extenstions.  Assigned (20050218)  None (candidate not yet proposed)    View
9944  CVE-2004-1516  Candidate  CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module.  Assigned (20050218)  None (candidate not yet proposed)    View
9943  CVE-2004-1515  Candidate  SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.  Assigned (20050218)  None (candidate not yet proposed)    View
9942  CVE-2004-1514  Candidate  04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device name such as COM2.  Assigned (20050218)  None (candidate not yet proposed)    View
9941  CVE-2004-1513  Candidate  04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries.  Assigned (20050218)  None (candidate not yet proposed)    View

Page 18955 of 20943, showing 5 records out of 104715 total, starting on record 94771, ending on 94775

Actions