CVE List

Id CVE No. Status Description Phase Votes Comments Actions
5176  CVE-2002-0786  Candidate  iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter.  Proposed (20020726)  NOOP(5) Armstrong, Cole, Cox, Foat, Wall    View
5177  CVE-2002-0787  Candidate  Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.  Proposed (20020726)  NOOP(5) Armstrong, Cole, Cox, Foat, Wall    View
5181  CVE-2002-0791  Candidate  Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length.  Proposed (20020726)  NOOP(5) Armstrong, Cole, Cox, Foat, Wall    View
5189  CVE-2002-0799  Candidate  Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.  Proposed (20020726)  NOOP(5) Armstrong, Cole, Cox, Foat, Wall    View
5190  CVE-2002-0800  Candidate  BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded "%" character at the end.  Proposed (20020726)  NOOP(4) Cole, Cox, Foat, Wall    View

Page 86 of 20943, showing 5 records out of 104715 total, starting on record 426, ending on 430

Actions