CVE List

Id CVE No. Status Description Phase Votes Comments Actions
13247  CVE-2005-2041  Candidate  Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitrary code via a long ViRobot_ID cookie (HTTP_COOKIE).  Assigned (20050621)  None (candidate not yet proposed)    View
4288  CVE-2001-1487  Candidate  popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option.  Assigned (20050621)  None (candidate not yet proposed)    View
6080  CVE-2002-1697  Candidate  Electronic Code Book (ECB) mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information.  Assigned (20050621)  None (candidate not yet proposed)    View
13248  CVE-2005-2042  Candidate  Cross-site scripting (XSS) vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags.  Assigned (20050621)  None (candidate not yet proposed)    View
4289  CVE-2001-1488  Candidate  Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attackers to spoof any valid hostname on the Internet. NOTE: a followup post suggests that this is not an issue in the daemon.  Assigned (20050621)  None (candidate not yet proposed)    View

Page 19254 of 20943, showing 5 records out of 104715 total, starting on record 96266, ending on 96270

Actions