NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
71733 | CVE-2004-1354 | The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal (..) attack. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View | |
72245 | CVE-2004-1867 | Cross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary web script or HTML via the Name field. | 2 | 4.3 | Medium | 2017-07-18 | 2017-07-10 | View | |
72501 | CVE-2004-2124 | The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View | |
72757 | CVE-2004-2380 | Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to write arbitrary files via a .. (dot dot) in the attfile parameter. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View | |
78901 | CVE-2001-1467 | mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks. | 2 | 7.5 | High | 2017-07-18 | 2017-07-10 | View |
Page 305 of 17672, showing 5 records out of 88360 total, starting on record 1521, ending on 1525