CVE List

Id CVE No. Status Description Phase Votes Comments Actions
10508  CVE-2004-2082  Candidate  The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service (pmsystem.exe crash) via a GET request wit a large number of leading "/" (slash) characters.  Assigned (20050519)  None (candidate not yet proposed)    View
10509  CVE-2004-2083  Candidate  Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."  Assigned (20050519)  None (candidate not yet proposed)    View
10510  CVE-2004-2084  Candidate  Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to inject arbitrary web script or HTML via the xSearch parameter.  Assigned (20050519)  None (candidate not yet proposed)    View
10511  CVE-2004-2085  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) the sid parameter to comments.php, (2) the cid, cf, or rfd parameters to category.php, or the cid parameter to (3) input.php, (4) browse.php, (5) themes/facade/header.php, or (6) themes/phpcc/header.php.  Assigned (20050519)  None (candidate not yet proposed)    View
10512  CVE-2004-2086  Candidate  Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a long query parameter.  Assigned (20050519)  None (candidate not yet proposed)    View

Page 19352 of 20943, showing 5 records out of 104715 total, starting on record 96756, ending on 96760

Actions