CVE List

Id CVE No. Status Description Phase Votes Comments Actions
12239  CVE-2005-1033  Candidate  CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter to index.php, (2) PHPSESSID parameter to index.php, (3) product parameter to tellafriend.php, (4) add parameter to view_cart.php, or (5) product parameter to view_product.php, which reveals the path in a PHP error message.  Assigned (20050410)  None (candidate not yet proposed)    View
12240  CVE-2005-1034  Candidate  SurgeFTP 2.2m1 allows remote attackers to cause a denial of service (application hang) via the LEAK command.  Assigned (20050410)  None (candidate not yet proposed)    View
12241  CVE-2005-1035  Candidate  Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact.  Assigned (20050410)  None (candidate not yet proposed)    View
12242  CVE-2005-1036  Candidate  FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges.  Assigned (20050410)  None (candidate not yet proposed)    View
12243  CVE-2005-1037  Candidate  Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.  Assigned (20050410)  None (candidate not yet proposed)    View

Page 19574 of 20943, showing 5 records out of 104715 total, starting on record 97866, ending on 97870

Actions