Show filters
70 Total Results
Displaying 61-70 of 70
Sort by:
Attacker Value
Unknown
CVE-2005-4481
Disclosure Date: December 22, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Polopoly 9 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. NOTE: the vendor has disputed this vulnerability, stating that the "XSS flaw was only part of the custom implementation of the [polopoly] site". As of 20061003, CVE has no further information on this issue, except that the original researcher has a history of testing live sites and assuming that discoveries indicate vulnerabilities in the associated package
0
Attacker Value
Unknown
CVE-2005-2656
Disclosure Date: September 06, 2005 (last updated February 22, 2025)
Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service (disk consumption) and possibly perform other unauthorized activities.
0
Attacker Value
Unknown
CVE-2003-0556
Disclosure Date: August 18, 2003 (last updated February 22, 2025)
Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of "user" requests to the control port 5003, as demonstrated using the blast TCP stress tester.
0
Attacker Value
Unknown
CVE-2002-0629
Disclosure Date: January 07, 2003 (last updated February 22, 2025)
The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via multiple connections to the server.
0
Attacker Value
Unknown
CVE-2002-0626
Disclosure Date: January 07, 2003 (last updated February 22, 2025)
Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities.
0
Attacker Value
Unknown
CVE-2002-0630
Disclosure Date: January 07, 2003 (last updated February 22, 2025)
The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via long or malformed ICMP packets.
0
Attacker Value
Unknown
CVE-2002-0627
Disclosure Date: January 07, 2003 (last updated February 22, 2025)
The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests.
0
Attacker Value
Unknown
CVE-2002-0628
Disclosure Date: January 07, 2003 (last updated February 22, 2025)
The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.
0
Attacker Value
Unknown
CVE-2002-1906
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) by sending incomplete HTTP requests and leaving the connections open.
0
Attacker Value
Unknown
CVE-2002-1905
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
0
