CVE List

Id CVE No. Status Description Phase Votes Comments Actions
5426  CVE-2002-1038  Candidate  Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the (1) Projects: Upload File Attachment or (2) Work Orders: Import features.  Proposed (20020830)  ACCEPT(3) Baker, Cole, Frech | NOOP(3) Cox, Foat, Wall    View
5428  CVE-2002-1040  Candidate  Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames.  Proposed (20020830)  ACCEPT(2) Baker, Cole | MODIFY(1) Frech | NOOP(3) Cox, Foat, Wall  Frech> XF:aix-dsfweb-scripts-insecure(10390)  View
5429  CVE-2002-1041  Candidate  Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames.  Proposed (20020830)  ACCEPT(2) Baker, Cole | MODIFY(1) Frech | NOOP(3) Cox, Foat, Wall  Frech> XF:aix-smit-panels-insecure(10393)  View
5430  CVE-2002-1042  Candidate  Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via .. (dot-dot backslash) sequences in the NS-query-pat parameter.  Proposed (20020830)  ACCEPT(1) Frech | NOOP(3) Cole, Cox, Foat | REVIEWING(1) Wall    View
5431  CVE-2002-1043  Candidate  Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Subject (" ").  Proposed (20020830)  ACCEPT(1) Frech | NOOP(4) Cole, Cox, Foat, Wall    View

Page 20872 of 20943, showing 5 records out of 104715 total, starting on record 104356, ending on 104360

Actions