CVE List

Id CVE No. Status Description Phase Votes Comments Actions
7554  CVE-2003-0730  Candidate  Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks.  Assigned (20030902)  None (candidate not yet proposed)    View
7555  CVE-2003-0731  Candidate  CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.  Assigned (20030903)  None (candidate not yet proposed)    View
7556  CVE-2003-0732  Candidate  CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.  Assigned (20030903)  None (candidate not yet proposed)    View
7557  CVE-2003-0733  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via (1) a forward instruction to the Servlet container or (2) other vulnerabilities in the WebLogic Server console application.  Assigned (20030903)  None (candidate not yet proposed)    View
7558  CVE-2003-0734  Candidate  Unknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based authentication is being used, allows users to bypass host-based access restrictions and log onto the system.  Assigned (20030903)  None (candidate not yet proposed)    View

Page 760 of 20943, showing 5 records out of 104715 total, starting on record 3796, ending on 3800

Actions