CVE List

Id CVE No. Status Description Phase Votes Comments Actions
9631  CVE-2004-1203  Candidate  parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server"s installation path.  Assigned (20041214)  None (candidate not yet proposed)    View
9632  CVE-2004-1204  Candidate  FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service (application crash) by calling Xman with a long -title value, possibly triggering a buffer overflow.  Assigned (20041214)  None (candidate not yet proposed)    View
9633  CVE-2004-1205  Candidate  codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohighlight parameter, which reveals the full path in an error message.  Assigned (20041214)  None (candidate not yet proposed)    View
9634  CVE-2004-1206  Candidate  Directory traversal vulnerability in codebrowserpntm.php in pnTresMailer 6.0.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the filetodownload parameter.  Assigned (20041214)  None (candidate not yet proposed)    View
9635  CVE-2004-1207  Candidate  The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service (server crash) via a large number of UDP join requests that exceeds the maximum player limit, as originally reported for Alpha Black Zero.  Assigned (20041214)  None (candidate not yet proposed)    View

Page 1927 of 20943, showing 5 records out of 104715 total, starting on record 9631, ending on 9635

Actions