CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
10497 | CVE-2004-2071 | Candidate | Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after the server name. | Assigned (20050519) | None (candidate not yet proposed) | View | |
76033 | CVE-2014-8732 | Candidate | Cross-site scripting (XSS) vulnerability in phpMemcachedAdmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Assigned (20141110) | None (candidate not yet proposed) | View | |
10753 | CVE-2004-2327 | Candidate | Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service (crash) via multiple malformed requests including (1) requests without GET, (2) GET requests without HTTP, (3) or long GET requests. | Assigned (20050816) | None (candidate not yet proposed) | View | |
76289 | CVE-2014-8988 | Candidate | MantisBT before 1.2.18 allows remote authenticated users to bypass the $g_download_attachments_threshold and $g_view_attachments_threshold restrictions and read attachments for private projects by leveraging access to a project that does not restrict access to attachments and a request to the download URL. | Assigned (20141119) | None (candidate not yet proposed) | View | |
11009 | CVE-2004-2583 | Candidate | SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous open connections to TCP port 25. | Assigned (20051128) | None (candidate not yet proposed) | View |
Page 97 of 20943, showing 5 records out of 104715 total, starting on record 481, ending on 485