Archive
March 2004
Vulnerabilities first published in this month (UTC), newest first.
176 results · Feed
-
Unscored —CVE-2004-0239 Public exploit
SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unaut…
-
Unscored —CVE-2004-0295 Public exploit
TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service (CPU consumption) via an open i…
-
Unscored —
Buffer overflow in Avirt Voice 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute ar…
-
Unscored —CVE-2004-0344 Public exploit
Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delet…
-
Unscored —CVE-2004-0271 Public exploit
Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web scr…
-
Unscored —
Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the…
-
Unscored —
SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL que…
-
Unscored —
AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correc…
-
Unscored —
Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote …
-
Unscored —CVE-2004-0300 Public exploit
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthoriz…
-
Unscored —CVE-2004-0293 Public exploit
Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot …
-
Unscored —
FreeChat 1.1.1a allows remote attackers to cause a denial of service (crash) via certain unexpected strings, as demonst…
-
Unscored —
Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows r…
-
Unscored —CVE-2004-0247 Public exploit
The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via excepti…
-
Unscored —
TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service (CPU consumption) via an empty USER name.
-
Unscored —
American Power Conversion (APC) Web/SNMP Management SmartSlot Card 3.0 through 3.0.3 and 3.21 are shipped with a defaul…
-
Unscored —CVE-2004-0112 EPSS 10%
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly…
-
Unscored —CVE-2004-0353 Public exploit
Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allo…
-
Unscored —CVE-2004-0241 Public exploit
X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (…
-
Unscored —CVE-2004-0281 Public exploit
Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-…
-
Unscored —
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary co…
-
Unscored —CVE-2004-0298 Public exploit
CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter.
-
Unscored —CVE-2004-0323 Public exploit
Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain pri…
-
Unscored —
SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the…
-
Unscored —
SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive inf…
-
Unscored —CVE-2004-0284 EPSS 17%
Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CP…
-
Unscored —CVE-2004-0249 Public exploit
PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable …
-
Unscored —CVE-2004-0358 Public exploit
Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitra…
-
Unscored —CVE-2004-0325 Public exploit
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" ar…
-
Unscored —CVE-2004-0266 Public exploit
SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote…
-
Unscored —
SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local use…
-
Unscored —
InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admind…
-
Unscored —
The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delet…
-
Unscored —
TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception by opening…
-
Unscored —CVE-2004-0251 Public exploit
Cross-site scripting (XSS) vulnerability in rxgoogle.cgi allows remote attackers to execute arbitrary script as other u…
-
Unscored —CVE-2004-0287 Public exploit
Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a…
-
Unscored —
Cisco 11000 Series Content Services Switches (CSS) running WebNS 5.0(x) before 05.0(04.07)S, and 6.10(x) before 06.10(0…
-
Unscored —
Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via (1) user.dll, (2…
-
Unscored —
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long tim…
-
Unscored —CVE-2004-0254 Public exploit
Cross-site scripting (XSS) vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary scri…