NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
71360 | CVE-2004-0958 | php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View | |
71616 | CVE-2004-1227 | Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via .. (dot dot) sequences in the (1) module, (2) action, or (3) theme parameters to index.php, (4) the theme parameter to Login.php, and possibly other parameters or scripts. | 2 | 10 | High | 2017-07-18 | 2017-07-10 | View | |
71872 | CVE-2004-1493 | Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple connections with long nicknames, possibly triggering a buffer overflow. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View | |
72128 | CVE-2004-1749 | Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service (CPU consumption) via a large number of HTTP requests. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View | |
72384 | CVE-2004-2007 | Cross-site scripting (XSS) vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to inject arbitrary HTML or web script via the (1) cat parameter in a CatView function or (2) jokeid parameter in a JokeView function. | 2 | 4.3 | Medium | 2017-07-18 | 2017-07-10 | View |
Page 17322 of 17672, showing 5 records out of 88360 total, starting on record 86606, ending on 86610