CVE List

Id CVE No. Status Description Phase Votes Comments Actions
2429  CVE-2000-0860  Entry  The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.        View
2941  CVE-2001-0120  Entry  useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.        View
3197  CVE-2001-0379  Entry  Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights.        View
3453  CVE-2001-0644  Entry  Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which could allow attackers to gain privileges on the server.        View
3965  CVE-2001-1161  Entry  Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that ends in Javascript, which generates an error message that does not quote the resulting script.        View

Page 303 of 20943, showing 5 records out of 104715 total, starting on record 1511, ending on 1515

Actions