CVE List

Id CVE No. Status Description Phase Votes Comments Actions
6700  CVE-2002-2318  Candidate  Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages.  Assigned (20071026)  None (candidate not yet proposed)    View
6699  CVE-2002-2317  Candidate  Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method.  Assigned (20071026)  None (candidate not yet proposed)    View
6698  CVE-2002-2316  Candidate  Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing.  Assigned (20071026)  None (candidate not yet proposed)    View
6697  CVE-2002-2315  Candidate  Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a denial of service (memory consumption) via spoofed ICMP redirect packets to the router.  Assigned (20071026)  None (candidate not yet proposed)    View
6696  CVE-2002-2314  Candidate  Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and ending in a newline, which causes the host/path check to fail.  Assigned (20071026)  None (candidate not yet proposed)    View

Page 19604 of 20943, showing 5 records out of 104715 total, starting on record 98016, ending on 98020

Actions