CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
13289 | CVE-2005-2083 | Candidate | Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to cause a denial of service (application crash) via a LIST command with format string specifiers as the second argument. | Assigned (20050630) | None (candidate not yet proposed) | View | |
78825 | CVE-2015-1548 | Candidate | mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read. | Assigned (20150207) | None (candidate not yet proposed) | View | |
13545 | CVE-2005-2339 | Candidate | Cross-site scripting (XSS) vulnerability in the Unicode version of msearch (unicode-msearch) 1.51(U1)-beta1, 1.51(U1), and 1.52(U1) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Assigned (20050721) | None (candidate not yet proposed) | View | |
79081 | CVE-2015-1804 | Candidate | The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file. | Assigned (20150217) | None (candidate not yet proposed) | View | |
13801 | CVE-2005-2595 | Candidate | Cross-site scripting (XSS) vulnerability in Dada Mail before 2.10 Alpha 1 allows remote attackers to execute arbitrary Javascript via archived messages. | Assigned (20050817) | None (candidate not yet proposed) | View |
Page 19120 of 20943, showing 5 records out of 104715 total, starting on record 95596, ending on 95600