CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
10185 | CVE-2004-1757 | Candidate | BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges. | Assigned (20050310) | None (candidate not yet proposed) | View | |
10186 | CVE-2004-1758 | Candidate | BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, which allows local users to gain privileges. | Assigned (20050310) | None (candidate not yet proposed) | View | |
10187 | CVE-2004-1759 | Candidate | Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning. | Assigned (20050310) | None (candidate not yet proposed) | View | |
10188 | CVE-2004-1760 | Candidate | The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247. | Assigned (20050310) | None (candidate not yet proposed) | View | |
10189 | CVE-2004-1761 | Candidate | Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color filter file. | Assigned (20050310) | None (candidate not yet proposed) | View |
Page 19663 of 20943, showing 5 records out of 104715 total, starting on record 98311, ending on 98315