Skip to content
OpenAdvisories

Archive

March 2004

Vulnerabilities first published in this month (UTC), newest first.

← February 2004 2004 / March April 2004 →
  1. 1 
  2. 2 
  3. 3 
  4. 44
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 1016
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 1621
  17. 17 
  18. 18113
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 235
  24. 24 
  25. 2514
  26. 26 
  27. 273
  28. 28 
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

176 results · Feed

  • Unscored —
    CVE-2004-0372

    xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by th…

    xine-ui Debian
  • Unscored —
    CVE-2004-0152

    Multiple stack-based buffer overflows in (1) the encode_mime function, (2) the encode_uuencode function, (3) or the dec…

  • Unscored —
    CVE-2004-0153

    Multiple format string vulnerabilities in emil 2.1.0 and earlier may allow remote attackers to execute arbitrary code b…

  • Unscored —
    CVE-2004-0149

    Multiple buffer overflows in xboing before 2.4 allow local users to gain privileges.

  • Unscored —
    CVE-2004-0368 EPSS 10%

    Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to e…

  • Unscored —
    CVE-2004-0220

    isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a mal…

  • Unscored —
    CVE-2004-0174 EPSS 12%

    Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows…

  • Unscored —
    CVE-2004-0222

    Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory…

  • Unscored —
    CVE-2004-0221

    isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet wi…

  • Unscored —
    CVE-2004-0367

    Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation p…

  • Unscored —
    CVE-2004-0218

    isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP p…

  • Unscored —
    CVE-2004-0365

    The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to …

  • Unscored —
    CVE-2004-0176 Public exploit EPSS 67%

    Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly…

  • Unscored —
    CVE-2004-0219

    isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet wi…

  • Unscored —
    CVE-2003-0782

    Multiple buffer overflows in ecartis before 1.0.0 allow attackers to cause a denial of service and possibly execute arb…

  • Unscored —
    CVE-2003-0618

    Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files f…

    perl Debian
  • Unscored —
    CVE-2003-0781

    Unknown vulnerability in ecartis before 1.0.0 does not properly validate user input, which allows attackers to obtain m…

  • Unscored —
    CVE-2004-0364

    The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allow…

  • Unscored —
    CVE-2004-0151

    Unknown vulnerability in xitalk 1.1.11 and earlier allows local users to execute arbitrary commands.

  • Unscored —
    CVE-2004-0362 Public exploit EPSS 73%

    Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, …

  • Unscored —
    CVE-2004-0363 Public exploit EPSS 67%

    Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in No…

  • Unscored —
    CVE-2003-1040

    kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of s…

  • Unscored —
    CVE-2004-0319 Public exploit

    Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary s…

  • Unscored —
    CVE-2004-0317

    Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the L…

  • Unscored —
    CVE-2004-0292 Public exploit

    Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and po…

  • Unscored —
    CVE-2004-0318 Public exploit

    Load Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the…

  • Unscored —
    CVE-2004-0302 Public exploit

    Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the…

  • Unscored —
    CVE-2004-0343 Public exploit

    Multiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2004-0236

    SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the pa…

  • Unscored —
    CVE-2004-0308

    Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco …

  • Unscored —
    CVE-2004-0258

    Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise …

  • Unscored —
    CVE-2004-0279

    AIM Sniff (aimSniff.pl) 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log.

  • Unscored —
    CVE-2004-0359

    Cross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to exe…

  • Unscored —
    CVE-2004-0327 Public exploit

    Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary…

  • Unscored —
    CVE-2004-0282 Public exploit

    Crob FTP daemon 3.5.2 allows remote attackers to cause a denial of service (crash) by repeatedly connecting to and disc…

  • Unscored —
    CVE-2004-0240

    Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in…

  • Unscored —
    CVE-2004-0285 Public exploit

    PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMy…

  • Unscored —
    CVE-2004-0253

    IBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of serv…

  • Unscored —
    CVE-2004-0286 Public exploit

    Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service (crash) and possibl…

  • Unscored —
    CVE-2004-0246 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) adm…