Skip to content
OpenAdvisories

Archive

January 2004

Vulnerabilities first published in this month (UTC), newest first.

← December 2003 2004 / January February 2004 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 64
  7. 7 
  8. 810
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 1417
  15. 1523
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 224
  23. 23 
  24. 24 
  25. 25 
  26. 261
  27. 27 
  28. 28 
  29. 299
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Unscored —
    CVE-2003-1032 Public exploit

    Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the colu…

  • Unscored —
    CVE-2004-0074 Public exploit

    Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, …

  • Unscored —
    CVE-2003-1031 Public exploit

    Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arb…

  • Unscored —
    CVE-2004-0072 Public exploit

    Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via en…

  • Unscored —
    CVE-2004-0071 Public exploit

    Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remot…

  • Unscored —
    CVE-2004-0069 Public exploit

    Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2004-0067 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2004-0073 Public exploit

    PHP remote file inclusion vulnerability in (1) config.php and (2) config_page.php for EasyDynamicPages 2.0 allows remot…

  • Unscored —
    CVE-2004-0064 Public exploit

    The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symli…

  • Unscored —
    CVE-2003-1029 Public exploit

    The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite lo…

    tcpdump Debian
  • Unscored —
    CVE-2003-1030 Public exploit EPSS 17%

    Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a lon…

  • Unscored —
    CVE-2004-0046 Public exploit

    Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2003-0816 Public exploit EPSS 48%

    Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFin…

  • Unscored —
    CVE-2004-0030 Public exploit

    PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php f…

  • Unscored —
    CVE-2003-1026 Public exploit EPSS 39%

    Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL …

  • Unscored —
    CVE-2003-0990 Public exploit EPSS 29%

    The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via …

  • Unscored —
    CVE-2003-1025 Public exploit EPSS 27%

    Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before …