Archive
March 2004
Vulnerabilities first published in this month (UTC), newest first.
176 results · Feed
-
Unscored —
Mailmgr 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/mailmgr.unsort, (2) /tmp…
-
Unscored —
WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service…
-
Unscored —CVE-2004-0337 Public exploit
Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary scri…
-
Unscored —CVE-2004-0340 Public exploit
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and S…
-
Unscored —CVE-2004-0242 Public exploit
X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2)…
-
Unscored —CVE-2004-0360 Public exploit
Unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vect…
-
Unscored —
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, al…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attacker…
-
Unscored —CVE-2004-0322 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary sc…
-
Unscored —CVE-2004-0303 Public exploit
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /gloss…
-
Unscored —
Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shel…
-
Unscored —CVE-2004-0245 Public exploit
Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service (crash) by sending a HTTP POST request wi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in done.jsp in WebzEdit 1.9 and earlier allows remote attackers to execute arb…
-
Unscored —CVE-2004-0361 Public exploit
The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation faul…
-
Unscored —CVE-2004-0305 Public exploit
Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execut…
-
Unscored —
Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privil…
-
Unscored —CVE-2004-0291 Public exploit
SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords …
-
Unscored —CVE-2004-0301 Public exploit
Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitra…
-
Unscored —
Cross-site scripting (XSS) vulnerability in LiveJournal 1.0 and 1.1 allows remote attackers to execute Javascript as ot…
-
Unscored —
YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers…
-
Unscored —
Cross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other use…
-
Unscored —CVE-2004-0275 Public exploit
SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sens…
-
Unscored —CVE-2004-0290 Public exploit
Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an informatio…
-
Unscored —
Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local …
-
Unscored —
Team Factor 1.25 and earlier allows remote attackers to cause a denial of service (crash) via a packet that uses a nega…
-
Unscored —CVE-2004-0269 Public exploit
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary …
-
Unscored —
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GE…
-
Unscored —
Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via …
-
Unscored —
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to e…
-
Unscored —CVE-2004-0255 Public exploit
Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long dire…
-
Unscored —
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a de…
-
Unscored —
Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly…
-
Unscored —CVE-2004-0265 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbit…
-
Unscored —CVE-2004-0268 Public exploit
Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service (hang) via (1…
-
Unscored —CVE-2004-0244 Public exploit
Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module all…
-
High 7.5
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause …
-
Unscored —
The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via …
-
Unscored —
LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a…
-
Unscored —CVE-2004-0304 Public exploit
SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unautho…
-
Unscored —CVE-2004-0264 Public exploit
palmhttpd for PalmOS allows remote attackers to cause a denial of service (crash) by establishing two simultaneous HTTP…