Archive
June 2004
Vulnerabilities first published in this month (UTC), newest first.
30 results · Clear filters · Feed
-
Unscored —
Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitr…
-
Unscored —CVE-2004-0618 Public exploit
FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call w…
-
Unscored —CVE-2004-0605 Public exploit
Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox…
-
Unscored —
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memo…
-
Unscored —CVE-2004-0620 Public exploit
Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote atta…
-
Unscored —CVE-2004-0613 Public exploit
osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP reque…
-
Unscored —
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier,…
-
Unscored —CVE-2004-0617 Public exploit
Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML v…
-
Unscored —CVE-2004-0615 Public exploit
Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router ru…
-
Unscored —CVE-2004-0616 Public exploit
The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obt…
-
Unscored —CVE-2004-0621 Public exploit
admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with th…
-
Unscored —CVE-2004-0591 Public exploit
Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly …
-
Unscored —CVE-2004-0580 Public exploit
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly c…
-
Unscored —
The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6…
-
Unscored —CVE-2004-0554 Public exploit
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an in…
-
Unscored —CVE-2004-0548 Public exploit
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local user…
-
Unscored —
Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may …
-
Unscored —
Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterpr…
-
Unscored —
Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when com…
-
Unscored —CVE-2004-0544 Public exploit
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) ge…
-
Unscored —CVE-2004-0528 Public exploit
Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modifie…
-
Unscored —CVE-2004-0524 Public exploit
Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local u…
-
Unscored —
Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar vi…
-
Unscored —CVE-2004-0527 Public exploit
KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with …
-
Unscored —
Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a r…
-
Unscored —CVE-2004-0228 Public exploit
Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain p…
-
Unscored —CVE-2004-0490 Public exploit
cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path opti…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary s…
-
Unscored —
Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an im…
-
Unscored —CVE-2004-0520 Public exploit
Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert ar…