CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
9047 | CVE-2004-0619 | Candidate | Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow. | Assigned (20040629) | None (candidate not yet proposed) | View | |
9048 | CVE-2004-0620 | Candidate | Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel. | Assigned (20040629) | None (candidate not yet proposed) | View | |
9049 | CVE-2004-0621 | Candidate | admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and their passwords. | Assigned (20040629) | None (candidate not yet proposed) | View | |
9050 | CVE-2004-0622 | Candidate | Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory. | Assigned (20040629) | None (candidate not yet proposed) | View | |
9051 | CVE-2004-0623 | Candidate | Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog. | Assigned (20040629) | None (candidate not yet proposed) | View |
Page 898 of 20943, showing 5 records out of 104715 total, starting on record 4486, ending on 4490