CVE List

Id CVE No. Status Description Phase Votes Comments Actions
13574  CVE-2005-2368  Candidate  vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.  Assigned (20050726)  None (candidate not yet proposed)    View
13575  CVE-2005-2369  Candidate  Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial of service or execute arbitrary code.  Assigned (20050726)  None (candidate not yet proposed)    View
13576  CVE-2005-2370  Candidate  Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.  Assigned (20050726)  None (candidate not yet proposed)    View
13577  CVE-2005-2371  Candidate  Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter. NOTE: this issue was probably fixed by REP06 in CPU Jan 2006, in which case it overlaps CVE-2006-0289.  Assigned (20050726)  None (candidate not yet proposed)    View
13578  CVE-2005-2372  Candidate  Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows attackers to execute arbitrary code by uploading a malicious .fmx file and referencing it using an absolute pathname argument in the (1) form or (2) module parameters to f90servlet.  Assigned (20050726)  None (candidate not yet proposed)    View

Page 19065 of 20943, showing 5 records out of 104715 total, starting on record 95321, ending on 95325

Actions