Archive
March 2004
Vulnerabilities first published in this month (UTC), newest first.
72 results · Clear filters · Feed
-
Unscored —CVE-2004-0303 Public exploit
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /gloss…
-
Unscored —CVE-2004-0245 Public exploit
Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service (crash) by sending a HTTP POST request wi…
-
Unscored —CVE-2004-0361 Public exploit
The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation faul…
-
Unscored —CVE-2004-0305 Public exploit
Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execut…
-
Unscored —CVE-2004-0291 Public exploit
SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords …
-
Unscored —CVE-2004-0301 Public exploit
Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitra…
-
Unscored —CVE-2004-0275 Public exploit
SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sens…
-
Unscored —CVE-2004-0290 Public exploit
Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an informatio…
-
Unscored —CVE-2004-0269 Public exploit
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary …
-
Unscored —
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GE…
-
Unscored —
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to e…
-
Unscored —CVE-2004-0255 Public exploit
Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long dire…
-
Unscored —
Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly…
-
Unscored —CVE-2004-0265 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbit…
-
Unscored —CVE-2004-0268 Public exploit
Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service (hang) via (1…
-
Unscored —CVE-2004-0244 Public exploit
Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module all…
-
Unscored —CVE-2004-0304 Public exploit
SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unautho…
-
Unscored —CVE-2004-0264 Public exploit
palmhttpd for PalmOS allows remote attackers to cause a denial of service (crash) by establishing two simultaneous HTTP…
-
Unscored —CVE-2004-0349 Public exploit
Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot…
-
Unscored —CVE-2004-0348 Public exploit
SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute ar…
-
Unscored —CVE-2004-0312 Public exploit
Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/w…
-
Unscored —
Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (cr…
-
Unscored —CVE-2004-0237 Public exploit
Directory traversal vulnerability in index.php in Aprox PHP Portal allows remote attackers to read arbitrary files via …
-
Unscored —CVE-2004-0299 Public exploit
Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a lar…
-
Unscored —CVE-2004-0238 Public exploit
Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the clie…
-
Unscored —CVE-2004-0345 Public exploit
Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long serve…
-
Unscored —CVE-2002-1576 Public exploit
lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which …
-
Unscored —CVE-2003-0514 Public exploit
Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (e…
-
Unscored —CVE-2004-0158 Public exploit
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable…
-
Unscored —CVE-2003-1006 Public exploit
Buffer overflow in cd9660.util in Apple Mac OS X 10.0 through 10.3.2 and Apple Mac OS X Server 10.0 through 10.3.2 may …
-
Unscored —CVE-2004-0192 Public exploit
Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote atta…
-
Unscored —
Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remo…