Skip to content
OpenAdvisories

Archive

21 July 2004

Vulnerabilities first published on this day (UTC), newest first.

← June 2004 2004 / July /21 August 2004 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 68
  7. 7 
  8. 811
  9. 93
  10. 10 
  11. 11 
  12. 12 
  13. 1339
  14. 147
  15. 15 
  16. 167
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 2118
  22. 22 
  23. 2327
  24. 24 
  25. 25 
  26. 26 
  27. 271
  28. 28 
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2004-0566 EPSS 38%

    Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with …

  • Unscored —
    CVE-2004-0711

    The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if t…

  • Unscored —
    CVE-2004-0715

    The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 d…

  • Unscored —
    CVE-2004-0706

    Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password …

  • Unscored —
    CVE-2004-0702

    DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not run…

  • Unscored —
    CVE-2004-0701

    Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when t…

  • Unscored —
    CVE-2004-0700

    Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for A…

  • Unscored —
    CVE-2004-0710

    IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers…

  • Unscored —
    CVE-2004-0713

    The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 throu…

  • Unscored —
    CVE-2004-0709

    HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which co…

  • Unscored —
    CVE-2004-0712

    The configuration tools (1) config.sh in Unix or (2) config.cmd in Windows for BEA WebLogic Server 8.1 through SP2 crea…

  • Unscored —
    CVE-2004-0705

    Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.c…

  • Unscored —
    CVE-2004-0714

    Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper…

  • Unscored —
    CVE-2004-0707

    SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote a…

  • High —
    CVE-2004-0708

    MoinMoin allows administrative access

    MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges.

    moin PyPI
  • Unscored —
    CVE-2004-0703

    Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant members…

  • Unscored —
    CVE-2004-0704

    Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, …

  • Unscored —
    CVE-2003-1048 EPSS 27%

    Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause …