Archive
March 2004
Vulnerabilities first published in this month (UTC), newest first.
72 results · Clear filters · Feed
-
Unscored —
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly…
-
Unscored —
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, …
-
Unscored —
Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in No…
-
Unscored —CVE-2004-0319 Public exploit
Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary s…
-
Unscored —CVE-2004-0292 Public exploit
Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and po…
-
Unscored —CVE-2004-0318 Public exploit
Load Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the…
-
Unscored —CVE-2004-0302 Public exploit
Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the…
-
Unscored —CVE-2004-0343 Public exploit
Multiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2004-0327 Public exploit
Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary…
-
Unscored —CVE-2004-0282 Public exploit
Crob FTP daemon 3.5.2 allows remote attackers to cause a denial of service (crash) by repeatedly connecting to and disc…
-
Unscored —CVE-2004-0285 Public exploit
PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMy…
-
Unscored —CVE-2004-0286 Public exploit
Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service (crash) and possibl…
-
Unscored —CVE-2004-0246 Public exploit
Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) adm…
-
Unscored —CVE-2004-0239 Public exploit
SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unaut…
-
Unscored —CVE-2004-0295 Public exploit
TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service (CPU consumption) via an open i…
-
Unscored —CVE-2004-0344 Public exploit
Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delet…
-
Unscored —CVE-2004-0271 Public exploit
Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web scr…
-
Unscored —CVE-2004-0300 Public exploit
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthoriz…
-
Unscored —CVE-2004-0293 Public exploit
Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot …
-
Unscored —CVE-2004-0247 Public exploit
The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via excepti…
-
Unscored —CVE-2004-0353 Public exploit
Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allo…
-
Unscored —CVE-2004-0241 Public exploit
X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (…
-
Unscored —CVE-2004-0281 Public exploit
Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-…
-
Unscored —
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary co…
-
Unscored —CVE-2004-0298 Public exploit
CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter.
-
Unscored —CVE-2004-0323 Public exploit
Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain pri…
-
Unscored —CVE-2004-0249 Public exploit
PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable …
-
Unscored —CVE-2004-0358 Public exploit
Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitra…
-
Unscored —CVE-2004-0325 Public exploit
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" ar…
-
Unscored —CVE-2004-0266 Public exploit
SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote…
-
Unscored —CVE-2004-0251 Public exploit
Cross-site scripting (XSS) vulnerability in rxgoogle.cgi allows remote attackers to execute arbitrary script as other u…
-
Unscored —CVE-2004-0287 Public exploit
Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a…
-
Unscored —
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long tim…
-
Unscored —CVE-2004-0254 Public exploit
Cross-site scripting (XSS) vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary scri…
-
Unscored —CVE-2004-0337 Public exploit
Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary scri…
-
Unscored —CVE-2004-0340 Public exploit
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and S…
-
Unscored —CVE-2004-0242 Public exploit
X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2)…
-
Unscored —CVE-2004-0360 Public exploit
Unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vect…
-
Unscored —
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, al…
-
Unscored —CVE-2004-0322 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary sc…