NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
70939 | CVE-2004-0503 | Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View | |
71195 | CVE-2004-0769 | Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the "x" option but also exploitable through "l" and "v", and fixed in header.c, a different issue than CVE-2004-0771. | 2 | 10 | High | 2017-07-18 | 2017-07-10 | View | |
71451 | CVE-2004-1059 | Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) next and (2) prev result search pages, and the (3) extended and (4) simple search forms. | 2 | 4.3 | Medium | 2017-07-18 | 2017-07-10 | View | |
71707 | CVE-2004-1327 | Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension. | 2 | 7.5 | High | 2017-07-18 | 2017-07-10 | View | |
71963 | CVE-2004-1584 | CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View |
Page 16450 of 17672, showing 5 records out of 88360 total, starting on record 82246, ending on 82250