CVE List

Id CVE No. Status Description Phase Votes Comments Actions
4580  CVE-2002-0188  Entry  Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the second variant of the "Content Disposition" vulnerability.        View
4579  CVE-2002-0187  Entry  Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."        View
4578  CVE-2002-0186  Entry  Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."        View
4577  CVE-2002-0185  Entry  mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module.        View
4576  CVE-2002-0184  Entry  Heap-based buffer overflow in sudo before 1.6.6 may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.        View

Page 20028 of 20943, showing 5 records out of 104715 total, starting on record 100136, ending on 100140

<<first 20024 | 20025 | 20026 | 20027 | 20028 | 20029 | 20030 | 20031 | 20032 last>>

Actions