CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
8778 | CVE-2004-0350 | Candidate | SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring. | Proposed (20040318) | ACCEPT(1) Cole | NOOP(3) Armstrong, Cox, Wall | View | |
8779 | CVE-2004-0351 | Candidate | Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data. | Proposed (20040318) | ACCEPT(1) Cole | NOOP(3) Armstrong, Cox, Wall | View | |
8671 | CVE-2004-0243 | Candidate | AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods. | Modified (20050518) | ACCEPT(1) Cole | NOOP(3) Armstrong, Cox, Wall | View | |
8673 | CVE-2004-0245 | Candidate | Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service (crash) by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero. | Modified (20050710) | ACCEPT(1) Cole | NOOP(3) Armstrong, Cox, Wall | View | |
8676 | CVE-2004-0248 | Candidate | Cross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into (1) keywords argument of main.inc.php, (2) body argument of help.inc.php, or (3) the subject field in Personal Messages and Forum. | Modified (20050815) | ACCEPT(1) Cole | NOOP(3) Armstrong, Cox, Wall | View |
Page 20279 of 20943, showing 5 records out of 104715 total, starting on record 101391, ending on 101395