CVE List

Id CVE No. Status Description Phase Votes Comments Actions
9901  CVE-2004-1473  Candidate  Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.  Assigned (20050213)  None (candidate not yet proposed)    View
9902  CVE-2004-1474  Candidate  Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall"s configuration file.  Assigned (20050213)  None (candidate not yet proposed)    View
9903  CVE-2004-1475  Candidate  Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines.  Assigned (20050213)  None (candidate not yet proposed)    View
9904  CVE-2004-1476  Candidate  Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label.  Assigned (20050213)  None (candidate not yet proposed)    View
9905  CVE-2004-1477  Candidate  Cross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbitrary web script or HTML and possibly hijack a user"s session.  Assigned (20050213)  None (candidate not yet proposed)    View

Page 19797 of 20943, showing 5 records out of 104715 total, starting on record 98981, ending on 98985

Actions