Skip to content
OpenAdvisories

Archive

8 January 2004

Vulnerabilities first published on this day (UTC), newest first.

← December 2003 2004 / January /8 February 2004 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 64
  7. 7 
  8. 810
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 1417
  15. 1523
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 224
  23. 23 
  24. 24 
  25. 25 
  26. 261
  27. 27 
  28. 28 
  29. 299
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Unscored —
    CVE-2004-0037

    FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF me…

  • Unscored —
    CVE-2004-0029

    Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allo…

  • Unscored —
    CVE-2004-0034

    Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2004-0014

    Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary c…

    nd Debian
  • Unscored —
    CVE-2004-0030 Public exploit

    PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php f…

  • Unscored —
    CVE-2003-0904

    Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reu…

  • Unscored —
    CVE-2003-0696

    The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial …

  • Unscored —
    CVE-2003-1027 EPSS 38%

    Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click ac…

  • Unscored —
    CVE-2003-1026 Public exploit EPSS 39%

    Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL …

  • Unscored —
    CVE-2003-1028 EPSS 19%

    The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP…