Archive
18 March 2004
Vulnerabilities first published on this day (UTC), newest first.
113 results · Feed
-
Unscored —CVE-2004-0319 Public exploit
Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary s…
-
Unscored —
Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the L…
-
Unscored —CVE-2004-0292 Public exploit
Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and po…
-
Unscored —CVE-2004-0318 Public exploit
Load Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the…
-
Unscored —CVE-2004-0302 Public exploit
Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the…
-
Unscored —CVE-2004-0343 Public exploit
Multiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL …
-
Unscored —
SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the pa…
-
Unscored —
Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco …
-
Unscored —
Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise …
-
Unscored —
AIM Sniff (aimSniff.pl) 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log.
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to exe…
-
Unscored —CVE-2004-0327 Public exploit
Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary…
-
Unscored —CVE-2004-0282 Public exploit
Crob FTP daemon 3.5.2 allows remote attackers to cause a denial of service (crash) by repeatedly connecting to and disc…
-
Unscored —
Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in…
-
Unscored —CVE-2004-0285 Public exploit
PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMy…
-
Unscored —
IBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of serv…
-
Unscored —CVE-2004-0286 Public exploit
Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service (crash) and possibl…
-
Unscored —CVE-2004-0246 Public exploit
Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) adm…
-
Unscored —CVE-2004-0239 Public exploit
SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unaut…
-
Unscored —CVE-2004-0295 Public exploit
TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service (CPU consumption) via an open i…
-
Unscored —
Buffer overflow in Avirt Voice 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute ar…
-
Unscored —CVE-2004-0344 Public exploit
Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delet…
-
Unscored —CVE-2004-0271 Public exploit
Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web scr…
-
Unscored —
Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the…
-
Unscored —
SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL que…
-
Unscored —
AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correc…
-
Unscored —
Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote …
-
Unscored —CVE-2004-0300 Public exploit
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthoriz…
-
Unscored —CVE-2004-0293 Public exploit
Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot …
-
Unscored —
FreeChat 1.1.1a allows remote attackers to cause a denial of service (crash) via certain unexpected strings, as demonst…
-
Unscored —
Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows r…
-
Unscored —CVE-2004-0247 Public exploit
The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via excepti…
-
Unscored —
TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service (CPU consumption) via an empty USER name.
-
Unscored —
American Power Conversion (APC) Web/SNMP Management SmartSlot Card 3.0 through 3.0.3 and 3.21 are shipped with a defaul…
-
Unscored —CVE-2004-0112 EPSS 10%
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly…
-
Unscored —CVE-2004-0353 Public exploit
Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allo…
-
Unscored —CVE-2004-0241 Public exploit
X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (…
-
Unscored —CVE-2004-0281 Public exploit
Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-…
-
Unscored —
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary co…
-
Unscored —CVE-2004-0298 Public exploit
CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter.