CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
10094 | CVE-2004-1666 | Candidate | Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long string that ends in a newline character. | Assigned (20050221) | None (candidate not yet proposed) | View | |
10095 | CVE-2004-1667 | Candidate | Off-by-one error in Halo Combat Evolved 1.04 and earlier allows remote attackers to cause a denial of service (server crash) via a long client response. | Assigned (20050221) | None (candidate not yet proposed) | View | |
10096 | CVE-2004-1668 | Candidate | Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the (1) pageid, (2) subid, or (3) catid parameters. | Assigned (20050221) | None (candidate not yet proposed) | View | |
10097 | CVE-2004-1669 | Candidate | Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to execute arbitrary web script or HTML via the (1) User name parameter to accountsettings.html or (2) Search string parameter to search.html. | Assigned (20050221) | None (candidate not yet proposed) | View | |
10098 | CVE-2004-1670 | Candidate | Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a .. (dot dot) in the user parameter to viewaction.html or (2) rename arbitrary files via a ....// (doubled dot dot) in the folderold or folder parameters to folders.html. | Assigned (20050221) | None (candidate not yet proposed) | View |
Page 19724 of 20943, showing 5 records out of 104715 total, starting on record 98616, ending on 98620