CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
10046 | CVE-2004-1618 | Candidate | Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed mp2 stream. | Assigned (20050220) | None (candidate not yet proposed) | View | |
10047 | CVE-2004-1619 | Candidate | Buffer overflow in Privateer"s Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nickname. | Assigned (20050220) | None (candidate not yet proposed) | View | |
10048 | CVE-2004-1620 | Candidate | CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php. | Assigned (20050220) | None (candidate not yet proposed) | View | |
10049 | CVE-2004-1621 | Candidate | ** DISPUTED ** NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of (1) computed for display, (2) computed when composed, or (3) computed text element fields. NOTE: the vendor has disputed this issue, saying that it is not a problem with Notes/Domino itself, but with the applications that do not properly handle this feature. | Assigned (20050220) | None (candidate not yet proposed) | View | |
10050 | CVE-2004-1622 | Candidate | SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statements via the Name parameter. | Assigned (20050220) | None (candidate not yet proposed) | View |
Page 19747 of 20943, showing 5 records out of 104715 total, starting on record 98731, ending on 98735