Skip to content
OpenAdvisories

Archive

April 2004

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 611
  7. 74
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 1630
  17. 179
  18. 18 
  19. 19 
  20. 203
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 304

61 results · Feed

  • Unscored —
    CVE-2003-0663 EPSS 32%

    Unknown vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows 2000 domain controllers allo…

  • Unscored —
    CVE-2003-0719 Public exploit EPSS 81%

    Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as …

  • Unscored —
    CVE-2003-0807 EPSS 40%

    Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server …

  • Unscored —
    CVE-2003-0908 Public exploit EPSS 26%

    The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to…

  • Unscored —
    CVE-2003-0907 EPSS 22%

    Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers …

  • Unscored —
    CVE-2003-0909 EPSS 21%

    Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through t…

  • Unscored —

    Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-for…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers t…

  • Unscored —
    CVE-2004-0386 Public exploit EPSS 27%

    Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute a…

  • Unscored —

    Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly …

  • Unscored —

    TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a …

  • Unscored —

    mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport te…

  • Unscored —
    CVE-2004-0374 Public exploit

    Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sens…

  • Unscored —

    The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain I…

  • Unscored —

    Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allo…

  • Unscored —
    CVE-2004-0380 Public exploit EPSS 63%

    The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers t…

  • Unscored —

    oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command with a large va…

  • Unscored —

    SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statemen…

  • Unscored —
    CVE-2004-0184 Public exploit EPSS 60%

    Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of ser…

  • Unscored —

    Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm …

  • Unscored —

    Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code.