CVE List

Id CVE No. Status Description Phase Votes Comments Actions
4356  CVE-2001-1556  Candidate  The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep.  Assigned (20050714)  None (candidate not yet proposed)    View
69892  CVE-2014-2597  Candidate  PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service (disabled keyboard or crash) via a large input buffer to unspecified IOCTL requests in RACDriver.sys, which triggers a buffer over-read.  Assigned (20140324)  None (candidate not yet proposed)    View
4612  CVE-2002-0220  Candidate  phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters.  Proposed (20020502)  ACCEPT(1) Green | NOOP(3) Cole, Foat, Wall    View
70148  CVE-2014-2853  Candidate  Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action.  Assigned (20140414)  None (candidate not yet proposed)    View
4868  CVE-2002-0476  Candidate  Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand.  Proposed (20020611)  ACCEPT(5) Baker, Cole, Frech, Green, Wall | NOOP(2) Cox, Foat | REVIEWING(1) Christey  Christey> See comments for CVE-2002-0477.  View

Page 936 of 20943, showing 5 records out of 104715 total, starting on record 4676, ending on 4680

Actions