Archive
June 2004
Vulnerabilities first published in this month (UTC), newest first.
116 results · Feed
-
Unscored —
Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitr…
-
Unscored —
gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the …
-
Unscored —
PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 (artmedic_links5) allows remote attackers t…
-
Unscored —
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is pr…
-
Unscored —
rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated …
-
Unscored —CVE-2004-0610 EPSS 15%
The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of servi…
-
Unscored —
osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote…
-
Unscored —CVE-2004-0618 Public exploit
FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call w…
-
Unscored —CVE-2004-0605 Public exploit
Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox…
-
Unscored —
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format…
-
Unscored —
FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x …
-
Unscored —
Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service (no new conn…
-
Unscored —
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memo…
-
Unscored —
Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code.
-
Unscored —CVE-2004-0620 Public exploit
Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote atta…
-
Unscored —
The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to …
-
Unscored —
Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via…
-
Unscored —CVE-2004-0613 Public exploit
osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP reque…
-
Unscored —
Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindo…
-
Unscored —
SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges vi…
-
Unscored —
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier,…
-
Unscored —
The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which …
-
Unscored —CVE-2004-0617 Public exploit
Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML v…
-
Unscored —
The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (cr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attacke…
-
Unscored —
Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a …
-
Unscored —
The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, w…
-
Unscored —CVE-2004-0615 Public exploit
Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router ru…
-
Unscored —
Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Pro…
-
Unscored —CVE-2004-0616 Public exploit
The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obt…
-
Unscored —CVE-2004-0621 Public exploit
admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with th…
-
Unscored —CVE-2004-0591 Public exploit
Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly …
-
Unscored —CVE-2004-0460 EPSS 45%
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remot…
-
Unscored —CVE-2004-0461 EPSS 17%
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsn…
-
Unscored —
Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a deni…
-
Unscored —
Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers…
-
Unscored —
The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system cr…
-
Unscored —
Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root.
-
Unscored —
Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of servic…
-
Unscored —
ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitra…