CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
10201 | CVE-2004-1773 | Candidate | Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar. | Assigned (20050329) | None (candidate not yet proposed) | View | |
12097 | CVE-2005-0891 | Candidate | Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image. | Assigned (20050328) | None (candidate not yet proposed) | View | |
6018 | CVE-2002-1634 | Candidate | Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3) websinfo.bas, (4) ndslogin.pl, (5) volscgi.pl, (6) lancgi.pl, (7) test.jse, or (8) env.pl. | Assigned (20050328) | None (candidate not yet proposed) | View | |
6019 | CVE-2002-1635 | Candidate | The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin. | Assigned (20050328) | None (candidate not yet proposed) | View | |
6020 | CVE-2002-1636 | Candidate | Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print. | Assigned (20050328) | None (candidate not yet proposed) | View |
Page 19602 of 20943, showing 5 records out of 104715 total, starting on record 98006, ending on 98010