CVE List

Id CVE No. Status Description Phase Votes Comments Actions
2043  CVE-2000-0465  Entry  Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability.        View
3323  CVE-2001-0506  Entry  Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability.        View
4603  CVE-2002-0211  Entry  Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.        View
6907  CVE-2003-0078  Entry  ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks that rely on distinguishing between padding and MAC verification errors, possibly leading to extraction of the original plaintext, aka the "Vaudenay timing attack."        View
8443  CVE-2004-0015  Entry  vbox3 0.1.8 and earlier does not properly drop privileges before executing a user-provided TCL script, which allows local users to gain privileges.        View

Page 20934 of 20943, showing 5 records out of 104715 total, starting on record 104666, ending on 104670

<<first 20930 | 20931 | 20932 | 20933 | 20934 | 20935 | 20936 | 20937 | 20938 last>>

Actions