NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
80100 | CVE-2002-1105 | Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, allows local users to use a utility program to obtain the group password. | 2 | 4.6 | Medium | 2017-01-05 | 2008-09-05 | View | |
80868 | CVE-2002-1917 | CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and adding a BCC mail header. | 2 | 5 | Medium | 2017-01-05 | 2008-09-05 | View | |
81124 | CVE-2002-2173 | Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message. | 2 | 7.5 | High | 2017-01-05 | 2008-09-05 | View | |
59108 | CVE-2006-0369 | ** DISPUTED ** MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query that created the VIEW. NOTE: this issue has been disputed by third parties, saying that the availability of the schema is a normal and sometimes desired aspect of database access. | 2 | 2.1 | Low | 2016-12-20 | 2008-09-05 | View | |
59620 | CVE-2006-0891 | Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing NULL (%00) byte in (1) the _SESSION["nocc_theme"] parameter in (a) html/footer.php; and (2) the lang and (3) theme parameters and the (4) Accept-Language HTTP header field, when force_default_lang is disabled, in (b) index.php, as demonstrated by injecting PHP code into a profile and accessing it using the lang parameter in index.php. | 2 | 5 | Medium | 2016-12-20 | 2008-09-05 | View |
Page 17479 of 17672, showing 5 records out of 88360 total, starting on record 87391, ending on 87395