Archive
June 2004
Vulnerabilities first published in this month (UTC), newest first.
116 results · Feed
-
Unscored —
acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the (1) DownLoadURL, (2) SaveFilePath, …
-
Unscored —
The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and w…
-
Unscored —
The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables or…
-
Unscored —CVE-2004-0580 Public exploit
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly c…
-
Unscored —
Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memo…
-
Unscored —
Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system pa…
-
Unscored —
Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a "security fix," does not properly validate input, which …
-
Unscored —
The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, w…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arb…
-
Unscored —
Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to co…
-
Unscored —CVE-2004-0492 EPSS 34%
Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a …
-
Unscored —
libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL…
-
Unscored —
Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote att…
-
Unscored —
Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large…
-
Unscored —
The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6…
-
Unscored —CVE-2004-0554 Public exploit
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an in…
-
Unscored —
LaunchServices in Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new applications, which could allow a…
-
Unscored —
Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x …
-
Unscored —CVE-2004-0548 Public exploit
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local user…
-
Unscored —
CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents…
-
Unscored —
Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may …
-
Unscored —
Buffer overflow in the ODBC driver for PostgreSQL before 7.2.1 allows remote attackers to cause a denial of service (cr…
-
Unscored —CVE-2004-0202 EPSS 26%
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server …
-
Unscored —
The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications…
-
Unscored —
serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which…
-
Unscored —
Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterpr…
-
Unscored —
Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when com…
-
Unscored —CVE-2004-0544 Public exploit
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) ge…
-
Unscored —
Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 al…
-
Unscored —CVE-2004-0542 EPSS 31%
PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote att…
-
Unscored —
LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack.
-
Unscored —CVE-2004-0528 Public exploit
Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modifie…
-
Unscored —
The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows …
-
Unscored —
Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long,…
-
Unscored —
The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path,…
-
Unscored —
Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers …
-
Unscored —CVE-2004-0524 Public exploit
Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local u…
-
Unscored —
Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier,…
-
Unscored —
HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service…
-
Unscored —
Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar vi…