Archive
13 July 2004
Vulnerabilities first published on this day (UTC), newest first.
39 results · Feed
-
Unscored —
The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP…
-
Unscored —
BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows att…
-
Unscored —
Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, …
-
Unscored —
Off-by-one error in the POP3_readmsg function in popclient 3.0b6 allows remote attackers to cause a denial of service (…
-
Unscored —
Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" modul…
-
Unscored —CVE-2004-0665 Public exploit
csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which revea…
-
Unscored —
Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows rem…
-
Unscored —
Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service (temporary hang…
-
Unscored —
Prestige 650HW-31 running Rompager 4.7 software allows remote attackers to cause a denial of service (device reboot) vi…
-
Unscored —CVE-2004-0672 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityM…
-
Unscored —
WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allow…
-
Unscored —CVE-2004-0668 Public exploit
Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service (server crash) via a large e-mail…
-
Unscored —
Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a …
-
Unscored —
Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) …
-
Unscored —
Lotus Domino 6.5.0 and 6.5.1, with IMAP enabled, allows remote authenticated users to change their quota by using the I…
-
Unscored —CVE-2004-0664 Public exploit
Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directori…
-
Unscored —
Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open, and sys_mknod inside ja…
-
Unscored —CVE-2004-0671 Public exploit
Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying …
-
Unscored —CVE-2004-0673 Public exploit
Cross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary we…
-
Unscored —
Buffer overflow in write_packet in control.c for l2tpd may allow remote attackers to execute arbitrary code.
-
Unscored —CVE-2004-0676 Public exploit
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to …
-
Unscored —CVE-2004-0678 Public exploit
Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to exe…
-
Unscored —
PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP request…
-
Unscored —CVE-2004-0648 Public exploit
Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in modules.php in PowerPortal 1.x allows remote attackers to inject arbitrary …
-
Unscored —CVE-2004-0683 Public exploit
Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a co…
-
Unscored —
UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and…
-
Unscored —CVE-2004-0656 Scanner template
The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by excee…
-
Unscored —CVE-2004-0681 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffi…
-
Unscored —
eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearch…
-
Unscored —CVE-2004-0660 Public exploit
Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in C…
-
Unscored —CVE-2004-0675 Public exploit
Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote atta…
-
Unscored —
Unknown vulnerability in Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03 allows remote attackers to cause a d…
-
Unscored —
Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2004-0682 Public exploit
comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to …
-
Unscored —
Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or th…
-
Unscored —
Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote …
-
Unscored —
shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink a…
-
Unscored —
Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a…