CVE List

Id CVE No. Status Description Phase Votes Comments Actions
10201  CVE-2004-1773  Candidate  Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.  Assigned (20050329)  None (candidate not yet proposed)    View
12097  CVE-2005-0891  Candidate  Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.  Assigned (20050328)  None (candidate not yet proposed)    View
6018  CVE-2002-1634  Candidate  Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3) websinfo.bas, (4) ndslogin.pl, (5) volscgi.pl, (6) lancgi.pl, (7) test.jse, or (8) env.pl.  Assigned (20050328)  None (candidate not yet proposed)    View
6019  CVE-2002-1635  Candidate  The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin.  Assigned (20050328)  None (candidate not yet proposed)    View
6020  CVE-2002-1636  Candidate  Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print.  Assigned (20050328)  None (candidate not yet proposed)    View

Page 19602 of 20943, showing 5 records out of 104715 total, starting on record 98006, ending on 98010

Actions