CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
10220 | CVE-2004-1792 | Candidate | swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000). | Assigned (20050504) | None (candidate not yet proposed) | View | |
10476 | CVE-2004-2050 | Candidate | eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the "maertsJ" password, which is hard-coded into lshell. | Assigned (20050504) | None (candidate not yet proposed) | View | |
10221 | CVE-2004-1793 | Candidate | Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm. | Assigned (20050504) | None (candidate not yet proposed) | View | |
10477 | CVE-2004-2051 | Candidate | The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL. | Assigned (20050504) | None (candidate not yet proposed) | View | |
10222 | CVE-2004-1794 | Candidate | Cross-site scripting (XSS) vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard. | Assigned (20050504) | None (candidate not yet proposed) | View |
Page 19467 of 20943, showing 5 records out of 104715 total, starting on record 97331, ending on 97335