CVE List

Id CVE No. Status Description Phase Votes Comments Actions
9925  CVE-2004-1497  Candidate  Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges.  Assigned (20050218)  None (candidate not yet proposed)    View
9924  CVE-2004-1496  Candidate  Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL containing (1) ".." (dot dot backslash), (2) "../" (dot dot slash), (3) "/%2E%2E%5C" (encoded dot dot backslash), or (4) "%2E%2E%2F" (encoded dot dot slash).  Assigned (20050218)  None (candidate not yet proposed)    View
9923  CVE-2004-1495  Candidate  The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via a corrupt ZIP archive.  Assigned (20050218)  None (candidate not yet proposed)    View
9922  CVE-2004-1494  Candidate  Buffer overflow in the Screen Fetch option in XDICT 2002 through 2005 allows remote attackers to cause a denial of service ( CPU consumption or application exit) and possibly execute arbitrary code via a long string.  Assigned (20050218)  None (candidate not yet proposed)    View
9921  CVE-2004-1493  Candidate  Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple connections with long nicknames, possibly triggering a buffer overflow.  Assigned (20050218)  None (candidate not yet proposed)    View

Page 18959 of 20943, showing 5 records out of 104715 total, starting on record 94791, ending on 94795

Actions