CVE List

Id CVE No. Status Description Phase Votes Comments Actions
13289  CVE-2005-2083  Candidate  Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to cause a denial of service (application crash) via a LIST command with format string specifiers as the second argument.  Assigned (20050630)  None (candidate not yet proposed)    View
78825  CVE-2015-1548  Candidate  mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.  Assigned (20150207)  None (candidate not yet proposed)    View
13545  CVE-2005-2339  Candidate  Cross-site scripting (XSS) vulnerability in the Unicode version of msearch (unicode-msearch) 1.51(U1)-beta1, 1.51(U1), and 1.52(U1) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  Assigned (20050721)  None (candidate not yet proposed)    View
79081  CVE-2015-1804  Candidate  The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.  Assigned (20150217)  None (candidate not yet proposed)    View
13801  CVE-2005-2595  Candidate  Cross-site scripting (XSS) vulnerability in Dada Mail before 2.10 Alpha 1 allows remote attackers to execute arbitrary Javascript via archived messages.  Assigned (20050817)  None (candidate not yet proposed)    View

Page 19120 of 20943, showing 5 records out of 104715 total, starting on record 95596, ending on 95600

Actions