Archive
July 2004
Vulnerabilities first published in this month (UTC), newest first.
121 results · Feed
-
Unscored —CVE-2004-0716 EPSS 13%
Buffer overflow in the DCE daemon (DCED) for the DCE endpoint mapper (epmap) on HP-UX 11 allows remote attackers to exe…
-
Unscored —
Sun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain Calendar Server privil…
-
Unscored —CVE-2004-0734 Public exploit
Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.
-
Unscored —
The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to…
-
Unscored —CVE-2004-0733 Public exploit
Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly e…
-
Unscored —CVE-2004-0725 Public exploit
Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbi…
-
Unscored —
Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Sp…
-
Unscored —
SQL injection vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to execute arbitrary…
-
Unscored —
The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a fra…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to inje…
-
Unscored —
PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid (1) category_rows parameter to index.p…
-
Unscored —
Opera 7.51 for Windows and 7.50 for Linux does not properly prevent a frame in one domain from injecting content into a…
-
Unscored —
LionMax Software WWW File Share Pro 2.60 allows remote attackers to cause a denial of service (crash or hang) via a lon…
-
Unscored —CVE-2004-0726 EPSS 11%
The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the l…
-
Unscored —
The search module in Php-Nuke allows remote attackers to gain sensitive information via the (1) "**" or (2) "+" search …
-
Unscored —
Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allow…
-
Unscored —
Buffer overflow in Whisper FTP Surfer 1.0.7 allows remote FTP servers to cause a denial of service (client crash) and p…
-
Unscored —CVE-2004-0740 Public exploit
The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service (server …
-
Unscored —
The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service (server or client crash) v…
-
Unscored —
Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prev…
-
Unscored —
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting cont…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PhpBB 2.0.8 allow remote attackers to inject arbitrary web scrip…
-
Unscored —
Multiple SQL injection vulnerabilities in the Search module in Php-Nuke allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2004-0723 EPSS 13%
Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write …
-
Unscored —
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb…
-
Unscored —
Multiple cross-site scripting vulnerabilities in index.php in the Search module for Php-Nuke allows remote attackers to…
-
Unscored —
Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to anothe…
-
Unscored —
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute …
-
Unscored —CVE-2004-0566 EPSS 38%
Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with …
-
Unscored —
The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if t…
-
Unscored —
The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 d…
-
Unscored —
Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password …
-
Unscored —
DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not run…
-
Unscored —
Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when t…
-
Unscored —
Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for A…
-
Unscored —
IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers…
-
Unscored —
The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 throu…
-
Unscored —
HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which co…
-
Unscored —
The configuration tools (1) config.sh in Unix or (2) config.cmd in Windows for BEA WebLogic Server 8.1 through SP2 crea…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.c…