CVE List

Id CVE No. Status Description Phase Votes Comments Actions
11824  CVE-2005-0618  Candidate  The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network through an untrusted network.  Assigned (20050302)  None (candidate not yet proposed)    View
11825  CVE-2005-0619  Candidate  Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows local users to gain privileges.  Assigned (20050302)  None (candidate not yet proposed)    View
11826  CVE-2005-0620  Candidate  Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local users to steal the information.  Assigned (20050302)  None (candidate not yet proposed)    View
11827  CVE-2005-0621  Candidate  Scrapland 1.0 and earlier allows remote attackers to cause a denial of service (server termination) by triggering an error, which is treated as a fatal error by the server, as demonstrated using (1) signed integers for size values, (2) an invalid model, (3) a "newpos" value that is less than or equal to a size value, or (4) partial packets.  Assigned (20050302)  None (candidate not yet proposed)    View
11828  CVE-2005-0622  Candidate  RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing (1) . (dot) or (2) space.  Assigned (20050302)  None (candidate not yet proposed)    View

Page 19685 of 20943, showing 5 records out of 104715 total, starting on record 98421, ending on 98425

Actions