CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 7227 | CVE-2003-0400 | Candidate | Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, as demonstrated using the "-->" string in a CookieName argument to the login template, referred to as a "memory leak" in some reports. | Assigned (20030610) | None (candidate not yet proposed) | View | |
| 7228 | CVE-2003-0401 | Candidate | Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template. | Assigned (20030610) | None (candidate not yet proposed) | View | |
| 7232 | CVE-2003-0405 | Candidate | Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS command, or (2) an HTTP Referrer that is processed in the VALID_PATHS command. | Assigned (20030610) | None (candidate not yet proposed) | View | |
| 7230 | CVE-2003-0403 | Candidate | Vignette StoryServer 5 and Vignette V/5 allows remote attackers to read and modify license information, and cause a denial of service (service halt) by directly accessing the /vgn/license template. | Assigned (20030610) | None (candidate not yet proposed) | View | |
| 7226 | CVE-2003-0399 | Candidate | Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds cookie to an arbitrary value and directly accessing the save template. | Assigned (20030610) | None (candidate not yet proposed) | View |
Page 544 of 20943, showing 5 records out of 104715 total, starting on record 2716, ending on 2720
