CVE List

Id CVE No. Status Description Phase Votes Comments Actions
1337  CVE-1999-1357  Candidate  Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.  Proposed (20010912)  MODIFY(1) Frech | NOOP(3) Cole, Foat, Wall  Frech> XF:netscape-cgi-filtering-css(8274)  View
1341  CVE-1999-1361  Candidate  Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages.  Proposed (20010912)  ACCEPT(1) Wall | MODIFY(1) Frech | NOOP(2) Cole, Foat  Frech> XF:winnt-wins-packet-flood-dos(7329)  View
1086  CVE-1999-1106  Candidate  Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argument.  Proposed (20010912)  ACCEPT(2) Cole, Frech | NOOP(2) Foat, Wall    View
1087  CVE-1999-1107  Candidate  Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable.  Proposed (20010912)  ACCEPT(1) Frech | NOOP(3) Cole, Foat, Wall    View
1090  CVE-1999-1110  Candidate  Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client.  Proposed (20010912)  ACCEPT(1) Wall | MODIFY(1) Frech | NOOP(2) Cole, Foat  Frech> XF:ie-mediaplayer-activex(7800)  View

Page 20687 of 20943, showing 5 records out of 104715 total, starting on record 103431, ending on 103435

Actions