Skip to content
OpenAdvisories

Archive

14 January 2004

Vulnerabilities first published on this day (UTC), newest first.

← December 2003 2004 / January /14 February 2004 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 64
  7. 7 
  8. 810
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 1417
  15. 1523
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 224
  23. 23 
  24. 24 
  25. 25 
  26. 261
  27. 27 
  28. 28 
  29. 299
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2004-0041

    The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, whi…

  • Unscored —
    CVE-2004-0046 Public exploit

    Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2004-0043

    Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2004-0017

    Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote…

  • Unscored —
    CVE-2004-0042

    vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remot…

    vsftpd Debian
  • Unscored —
    CVE-2002-0034

    The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS pe…

  • Unscored —
    CVE-2002-0712

    Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of…

  • Unscored —
    CVE-2003-0816 Public exploit EPSS 48%

    Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFin…

  • Unscored —
    CVE-2003-0949

    xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users…

    xsok Debian
  • Unscored —
    CVE-2003-0119

    The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which a…

  • Unscored —
    CVE-2003-0368

    Nokia Gateway GPRS support node (GGSN) allows remote attackers to cause a denial of service (kernel panic) via a malfor…

  • Unscored —
    CVE-2003-0175

    SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWA…

  • Unscored —
    CVE-2003-0817 EPSS 18%

    Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via a…

  • Unscored —
    CVE-2003-0902

    Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions, allows remote attackers…

  • Unscored —
    CVE-2003-0814 EPSS 28%

    Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setti…

  • Unscored —
    CVE-2003-0823 EPSS 26%

    Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click act…

  • Unscored —
    CVE-2003-0815 EPSS 19%

    Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1)…