CVE List

Id CVE No. Status Description Phase Votes Comments Actions
9635  CVE-2004-1207  Candidate  The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service (server crash) via a large number of UDP join requests that exceeds the maximum player limit, as originally reported for Alpha Black Zero.  Assigned (20041214)  None (candidate not yet proposed)    View
9636  CVE-2004-1208  Candidate  Buffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long password field in a join request.  Assigned (20041214)  None (candidate not yet proposed)    View
9637  CVE-2004-1209  Candidate  Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers to modify the price of the items that they purchase.  Assigned (20041214)  None (candidate not yet proposed)    View
9638  CVE-2004-1210  Candidate  Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables.  Assigned (20041214)  None (candidate not yet proposed)    View
9639  CVE-2004-1211  Candidate  Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6) CLOSE, (7) EXPUNGE, (8) FETCH, (9) RENAME, (10) DELETE, (11) LIST, (12) SEARCH, (13) CREATE, or (14) UNSUBSCRIBE commands.  Assigned (20041214)  None (candidate not yet proposed)    View

Page 19925 of 20943, showing 5 records out of 104715 total, starting on record 99621, ending on 99625

Actions