Archive
July 2004
Vulnerabilities first published in this month (UTC), newest first.
34 results · Clear filters · Feed
-
Unscored —CVE-2004-0734 Public exploit
Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.
-
Unscored —
The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to…
-
Unscored —CVE-2004-0733 Public exploit
Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly e…
-
Unscored —CVE-2004-0725 Public exploit
Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbi…
-
Unscored —
Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Sp…
-
Unscored —
Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allow…
-
Unscored —CVE-2004-0740 Public exploit
The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service (server …
-
Unscored —
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute …
-
Unscored —
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when re…
-
Unscored —
Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbi…
-
Unscored —
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag…
-
Unscored —
Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which al…
-
Unscored —
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, a…
-
High 7.8
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain p…
KEV Mar 3, 2022 -
Unscored —CVE-2004-0665 Public exploit
csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which revea…
-
Unscored —CVE-2004-0672 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityM…
-
Unscored —CVE-2004-0668 Public exploit
Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service (server crash) via a large e-mail…
-
Unscored —CVE-2004-0664 Public exploit
Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directori…
-
Unscored —CVE-2004-0671 Public exploit
Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying …
-
Unscored —CVE-2004-0673 Public exploit
Cross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary we…
-
Unscored —CVE-2004-0676 Public exploit
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to …
-
Unscored —CVE-2004-0678 Public exploit
Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to exe…
-
Unscored —CVE-2004-0648 Public exploit
Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbit…
-
Unscored —CVE-2004-0683 Public exploit
Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a co…
-
Unscored —CVE-2004-0681 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffi…
-
Unscored —CVE-2004-0660 Public exploit
Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in C…
-
Unscored —CVE-2004-0675 Public exploit
Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote atta…
-
Unscored —
Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2004-0682 Public exploit
comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to …
-
Unscored —CVE-2004-0639 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject…
-
Unscored —
The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication …
-
Unscored —
The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abo…
-
Unscored —CVE-2004-0497 Public exploit
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported f…
-
Unscored —CVE-2002-1581 Public exploit
Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view…