CVE List

Id CVE No. Status Description Phase Votes Comments Actions
10046  CVE-2004-1618  Candidate  Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed mp2 stream.  Assigned (20050220)  None (candidate not yet proposed)    View
10047  CVE-2004-1619  Candidate  Buffer overflow in Privateer"s Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nickname.  Assigned (20050220)  None (candidate not yet proposed)    View
10048  CVE-2004-1620  Candidate  CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.  Assigned (20050220)  None (candidate not yet proposed)    View
10049  CVE-2004-1621  Candidate  ** DISPUTED ** NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of (1) computed for display, (2) computed when composed, or (3) computed text element fields. NOTE: the vendor has disputed this issue, saying that it is not a problem with Notes/Domino itself, but with the applications that do not properly handle this feature.  Assigned (20050220)  None (candidate not yet proposed)    View
10050  CVE-2004-1622  Candidate  SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statements via the Name parameter.  Assigned (20050220)  None (candidate not yet proposed)    View

Page 19747 of 20943, showing 5 records out of 104715 total, starting on record 98731, ending on 98735

Actions