NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
71617 | CVE-2004-1228 | The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative password in cleartext from an installation form, or to cause a denial of service by changing database settings to the default. | 2 | 6.4 | Medium | 2017-07-18 | 2017-07-10 | View | |
71873 | CVE-2004-1494 | Buffer overflow in the Screen Fetch option in XDICT 2002 through 2005 allows remote attackers to cause a denial of service ( CPU consumption or application exit) and possibly execute arbitrary code via a long string. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View | |
72129 | CVE-2004-1750 | RealVNC 4.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of connections to port 5900. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View | |
72385 | CVE-2004-2008 | SQL injection vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to execute arbitrary SQL via the jokeid parameter. | 2 | 4.6 | Medium | 2017-07-18 | 2017-07-10 | View | |
72641 | CVE-2004-2264 | ** DISPUTED ** Format string bug in the open_altfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a vulnerability unless there are plausible scenarios under which privilege boundaries could be crossed. | 2 | 6.4 | Medium | 2017-07-18 | 2017-07-10 | View |
Page 17188 of 17672, showing 5 records out of 88360 total, starting on record 85936, ending on 85940