CVE List

Id CVE No. Status Description Phase Votes Comments Actions
9047  CVE-2004-0619  Candidate  Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow.  Assigned (20040629)  None (candidate not yet proposed)    View
9048  CVE-2004-0620  Candidate  Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel.  Assigned (20040629)  None (candidate not yet proposed)    View
9049  CVE-2004-0621  Candidate  admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and their passwords.  Assigned (20040629)  None (candidate not yet proposed)    View
9050  CVE-2004-0622  Candidate  Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory.  Assigned (20040629)  None (candidate not yet proposed)    View
9051  CVE-2004-0623  Candidate  Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.  Assigned (20040629)  None (candidate not yet proposed)    View

Page 898 of 20943, showing 5 records out of 104715 total, starting on record 4486, ending on 4490

Actions