CVE List

Id CVE No. Status Description Phase Votes Comments Actions
9895  CVE-2004-1467  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) date or search text field in the calendar module, (2) Field parameter, Filter parameter, QField parameter, Start parameter or Search field in the address module, (3) Subject field in the message module or (4) Subject field in the Ticket module.  Assigned (20050213)  None (candidate not yet proposed)    View
9894  CVE-2004-1466  Candidate  The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using save_photos.php, which allows remote attackers to upload and execute execute arbitrary scripts before they are deleted, if the temporary directory is under the web root.  Assigned (20050213)  None (candidate not yet proposed)    View
9893  CVE-2004-1465  Candidate  Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.  Assigned (20050213)  None (candidate not yet proposed)    View
9892  CVE-2004-1464  Candidate  Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.  Assigned (20050213)  None (candidate not yet proposed)    View
9891  CVE-2004-1463  Candidate  Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact.  Assigned (20050213)  None (candidate not yet proposed)    View

Page 18965 of 20943, showing 5 records out of 104715 total, starting on record 94821, ending on 94825

Actions