CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
10595 | CVE-2004-2169 | Candidate | Application Access Server (A-A-S) 1.0.37 and earlier allows remote authenticated users to cause a denial of service (application crash) via a long file request. | Assigned (20050710) | None (candidate not yet proposed) | View | |
10596 | CVE-2004-2170 | Candidate | Directory traversal vulnerability in sample_showcode.html in Caravan 2.00/03d and earlier allows remote attackers to read arbitrary files via the fname parameter. | Assigned (20050710) | None (candidate not yet proposed) | View | |
10597 | CVE-2004-2171 | Candidate | Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting error page. | Assigned (20050710) | None (candidate not yet proposed) | View | |
10598 | CVE-2004-2172 | Candidate | EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack. | Assigned (20050710) | None (candidate not yet proposed) | View | |
10599 | CVE-2004-2173 | Candidate | SQL injection vulnerability in advSearch_h.asp in EarlyImpact ProductCart allows remote attackers to execute arbitrary SQL commands via the priceUntil parameter. | Assigned (20050710) | None (candidate not yet proposed) | View |
Page 19165 of 20943, showing 5 records out of 104715 total, starting on record 95821, ending on 95825