NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 73466 | CVE-2003-0332 | The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which allows remote attackers to bypass authentication via a filename with a .ats extension instead of a .hts extension. | 2 | 7.6 | High | 2017-01-03 | 2016-10-17 | View | |
| 73722 | CVE-2003-0605 | The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function. | 2 | 7.5 | High | 2017-01-03 | 2016-10-17 | View | |
| 73978 | CVE-2003-0883 | The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an administrator has authenticated to the system. | 2 | 4.6 | Medium | 2017-01-03 | 2008-09-05 | View | |
| 74490 | CVE-2003-1420 | Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbitrary web script or HTML via the HTTP Location header. | 2 | 4.3 | Medium | 2017-01-03 | 2008-09-05 | View | |
| 251 | CVE-2008-0266 | Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly perform other administrative tasks. NOTE: either the old password must be known, or the attacker must leverage a separate SQL injection vulnerability. | 2 | 2.6 | Low | 2017-01-03 | 2008-09-05 | View |
Page 16127 of 17672, showing 5 records out of 88360 total, starting on record 80631, ending on 80635
