Archive
April 2004
Vulnerabilities first published in this month (UTC), newest first.
61 results · Feed
-
Unscored —CVE-2003-0663 EPSS 32%
Unknown vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows 2000 domain controllers allo…
-
Unscored —
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as …
-
Unscored —CVE-2003-0807 EPSS 40%
Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server …
-
Unscored —
The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to…
-
Unscored —CVE-2003-0907 EPSS 22%
Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers …
-
Unscored —CVE-2003-0909 EPSS 21%
Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through t…
-
Unscored —
Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-for…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers t…
-
Unscored —
Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute a…
-
Unscored —
Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly …
-
Unscored —
TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a …
-
Unscored —
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport te…
-
Unscored —CVE-2004-0374 Public exploit
Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sens…
-
Unscored —
The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain I…
-
Unscored —
Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allo…
-
Unscored —
The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers t…
-
Unscored —
oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command with a large va…
-
Unscored —
SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statemen…
-
Unscored —
Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of ser…
-
Unscored —
Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm …
-
Unscored —
Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code.