Archive
May 2004
Vulnerabilities first published in this month (UTC), newest first.
52 results · Feed
-
Unscored —
Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attacke…
-
Unscored —CVE-2004-0486 Public exploit
HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execu…
-
Unscored —
Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers…
-
Unscored —CVE-2004-0488 EPSS 38%
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is …
-
Unscored —
The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary …
-
Unscored —
Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitra…
-
Unscored —
Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" a…
-
Unscored —
Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popu…
-
Unscored —CVE-2004-0475 EPSS 10%
The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM …
-
Unscored —
mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a t…
-
Unscored —
BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for sta…
-
Unscored —
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall…
-
Unscored —
The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encodin…
-
Unscored —
Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earl…
-
Unscored —
Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in …
-
Unscored —
The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in …
-
Unscored —
Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) pro…
-
Unscored —
Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javasc…
-
Unscored —
BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic …
-
Unscored —
Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite …
-
Unscored —
Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allow…
-
Unscored —CVE-2004-0444 EPSS 13%
Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton…
-
Unscored —
Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code …
-
Unscored —
Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal …
-
Unscored —
Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R…
-
Unscored —
Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions.
-
Unscored —CVE-2004-0199 EPSS 26%
Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which …
-
Unscored —
Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via…
-
Unscored —
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS m…
-
Unscored —
k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility adminis…
-
Unscored —
Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows re…
-
Unscored —
Stack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attac…
-
Unscored —
Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large…
-
Unscored —
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Ema…
-
Unscored —
Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS de…
-
Unscored —CVE-2004-0437 Public exploit
Titan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows remote authenticated user…
-
Unscored —
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbit…
-
Unscored —
racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) vi…
-
Unscored —
A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to …
-
Unscored —
Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary f…