Skip to content
OpenAdvisories

Archive

18 March 2004

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 44
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 1016
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 1621
  17. 17 
  18. 18113
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 235
  24. 24 
  25. 2514
  26. 26 
  27. 273
  28. 28 
  29. 29 
  30. 30 
  31. 31 

113 results · Feed

  • Unscored —
    CVE-2004-0290 Public exploit

    Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an informatio…

  • Unscored —

    Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local …

  • Unscored —

    Team Factor 1.25 and earlier allows remote attackers to cause a denial of service (crash) via a packet that uses a nega…

  • Unscored —
    CVE-2004-0269 Public exploit

    SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2004-0326 Public exploit EPSS 62%

    Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GE…

  • Unscored —

    Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2004-0354 Public exploit EPSS 16%

    Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to e…

  • Unscored —
    CVE-2004-0255 Public exploit

    Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long dire…

  • Unscored —

    OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a de…

  • Unscored —
    CVE-2004-0277 Public exploit EPSS 14%

    Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly…

  • Unscored —
    CVE-2004-0265 Public exploit

    Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2004-0268 Public exploit

    Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service (hang) via (1…

  • Unscored —
    CVE-2004-0244 Public exploit

    Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module all…

  • High 7.5

    The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause …

  • Unscored —

    The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via …

  • Unscored —

    LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a…

  • Unscored —
    CVE-2004-0304 Public exploit

    SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unautho…

  • Unscored —
    CVE-2004-0264 Public exploit

    palmhttpd for PalmOS allows remote attackers to cause a denial of service (crash) by establishing two simultaneous HTTP…

  • Unscored —

    Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal …

  • Unscored —

    Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends …

  • Unscored —
    CVE-2004-0349 Public exploit

    Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot…

  • Unscored —

    Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service (segmentation fault) vi…

  • Unscored —
    CVE-2004-0348 Public exploit

    SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute ar…

  • Unscored —

    Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to ex…

  • Unscored —

    WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local u…

  • Unscored —
    CVE-2004-0312 Public exploit

    Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/w…

  • Unscored —
    CVE-2004-0331 Public exploit EPSS 16%

    Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (cr…

  • Unscored —

    Buffer overflow in Avirt Soho 4.3 allows remote attackers to cause a denial of service (crash) via (1) a large GET requ…

  • Unscored —
    CVE-2004-0237 Public exploit

    Directory traversal vulnerability in index.php in Aprox PHP Portal allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2004-0299 Public exploit

    Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a lar…

  • Unscored —
    CVE-2004-0238 Public exploit

    Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the clie…

  • Unscored —

    The (1) inoregupdate, (2) uniftest, or (3) unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to ove…

  • Unscored —
    CVE-2004-0345 Public exploit

    Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long serve…