CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
9895 | CVE-2004-1467 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) date or search text field in the calendar module, (2) Field parameter, Filter parameter, QField parameter, Start parameter or Search field in the address module, (3) Subject field in the message module or (4) Subject field in the Ticket module. | Assigned (20050213) | None (candidate not yet proposed) | View | |
9894 | CVE-2004-1466 | Candidate | The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using save_photos.php, which allows remote attackers to upload and execute execute arbitrary scripts before they are deleted, if the temporary directory is under the web root. | Assigned (20050213) | None (candidate not yet proposed) | View | |
9893 | CVE-2004-1465 | Candidate | Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line. | Assigned (20050213) | None (candidate not yet proposed) | View | |
9892 | CVE-2004-1464 | Candidate | Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port. | Assigned (20050213) | None (candidate not yet proposed) | View | |
9891 | CVE-2004-1463 | Candidate | Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact. | Assigned (20050213) | None (candidate not yet proposed) | View |
Page 18965 of 20943, showing 5 records out of 104715 total, starting on record 94821, ending on 94825