CVE List

Id CVE No. Status Description Phase Votes Comments Actions
3940  CVE-2001-1136  Candidate  The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service.  Proposed (20020315)  ACCEPT(6) Armstrong, Baker, Cole, Frech, Green, Ziese | NOOP(2) Foat, Wall    View
4452  CVE-2002-0058  Candidate  Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client"s sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK.  Proposed (20020315)  ACCEPT(5) Cole, Foat, Green, Wall, Ziese | NOOP(1) Christey  Christey> Consider adding BID:4228 | Christey> XF:java-vm-session-hijacking(8351) | URL:http://www.iss.net/security_center/static/8351.php | HP:HPSBUX0203-186 | URL:http://online.securityfocus.com/advisories/3930 | BID:4228 | URL:http://www.securityfocus.com/bid/4228 | | Need to add "HttpURLConnection" to description (commonly used word) | Christey> ADDREF COMPAQ:SSRT0822 | Christey> COMPAQ:SSRT0822 | Christey> SGI:20020807-01-I | URL:ftp://patches.sgi.com/support/free/security/advisories/20020807-01-I | Christey> BID:4228 | URL:http://www.securityfocus.com/bid/4228  View
3941  CVE-2001-1137  Candidate  D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (reboot) via malformed IP datagram fragments.  Proposed (20020315)  ACCEPT(2) Frech, Green | NOOP(5) Armstrong, Cole, Foat, Wall, Ziese  Green> WITHOUT COMMENT  View
3942  CVE-2001-1138  Candidate  Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter.  Proposed (20020315)  ACCEPT(2) Frech, Green | NOOP(5) Armstrong, Cole, Foat, Wall, Ziese    View
3943  CVE-2001-1139  Candidate  Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request.  Proposed (20020315)  ACCEPT(2) Frech, Green | NOOP(5) Armstrong, Cole, Foat, Wall, Ziese    View

Page 20775 of 20943, showing 5 records out of 104715 total, starting on record 103871, ending on 103875

Actions