Skip to content
OpenAdvisories

Archive

January 2004

Vulnerabilities first published in this month (UTC), newest first.

← December 2003 2004 / January February 2004 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 64
  7. 7 
  8. 810
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 1417
  15. 1523
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 224
  23. 23 
  24. 24 
  25. 25 
  26. 261
  27. 27 
  28. 28 
  29. 299
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

68 results · Feed

  • Unscored —
    CVE-2004-0017

    Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote…

  • Unscored —
    CVE-2004-0042

    vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remot…

    vsftpd Debian
  • Unscored —
    CVE-2002-0034

    The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS pe…

  • Unscored —
    CVE-2002-0712

    Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of…

  • Unscored —
    CVE-2003-0816 Public exploit EPSS 48%

    Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFin…

  • Unscored —
    CVE-2003-0949

    xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users…

    xsok Debian
  • Unscored —
    CVE-2003-0119

    The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which a…

  • Unscored —
    CVE-2003-0368

    Nokia Gateway GPRS support node (GGSN) allows remote attackers to cause a denial of service (kernel panic) via a malfor…

  • Unscored —
    CVE-2003-0175

    SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWA…

  • Unscored —
    CVE-2003-0817 EPSS 18%

    Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via a…

  • Unscored —
    CVE-2003-0902

    Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions, allows remote attackers…

  • Unscored —
    CVE-2003-0814 EPSS 28%

    Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setti…

  • Unscored —
    CVE-2003-0823 EPSS 26%

    Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click act…

  • Unscored —
    CVE-2003-0815 EPSS 19%

    Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1)…

  • Unscored —
    CVE-2004-0037

    FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF me…

  • Unscored —
    CVE-2004-0029

    Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allo…

  • Unscored —
    CVE-2004-0034

    Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2004-0014

    Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary c…

    nd Debian
  • Unscored —
    CVE-2004-0030 Public exploit

    PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php f…

  • Unscored —
    CVE-2003-0904

    Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reu…

  • Unscored —
    CVE-2003-0696

    The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial …

  • Unscored —
    CVE-2003-1027 EPSS 38%

    Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click ac…

  • Unscored —
    CVE-2003-1026 Public exploit EPSS 39%

    Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL …

  • Unscored —
    CVE-2003-1028 EPSS 19%

    The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP…

  • Unscored —
    CVE-2003-0990 Public exploit EPSS 29%

    The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via …

  • Unscored —
    CVE-2003-1025 Public exploit EPSS 27%

    Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before …

  • Unscored —
    CVE-2003-1024

    Unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as…

  • Unscored —
    CVE-2003-1023

    Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, a…

    mc Debian