CVE List

Id CVE No. Status Description Phase Votes Comments Actions
8794  CVE-2004-0366  Candidate  SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements.  Assigned (20040322)  None (candidate not yet proposed)    View
8795  CVE-2004-0367  Candidate  Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector.  Assigned (20040322)  None (candidate not yet proposed)    View
8791  CVE-2004-0363  Candidate  Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method.  Assigned (20040319)  None (candidate not yet proposed)    View
8792  CVE-2004-0364  Candidate  The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method.  Assigned (20040319)  None (candidate not yet proposed)    View
8790  CVE-2004-0362  Candidate  Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.  Assigned (20040318)  None (candidate not yet proposed)    View

Page 20099 of 20943, showing 5 records out of 104715 total, starting on record 100491, ending on 100495

Actions