Archive
July 2004
Vulnerabilities first published in this month (UTC), newest first.
121 results · Feed
-
Unscored —
Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper…
-
Unscored —
SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote a…
-
High —
MoinMoin allows administrative access
MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges.
-
Unscored —
Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant members…
-
Unscored —
Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, …
-
Unscored —CVE-2003-1048 EPSS 27%
Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause …
-
Unscored —
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when re…
-
Unscored —
Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows …
-
Unscored —
The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a…
-
Unscored —
Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file an…
-
Unscored —
4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack.
-
Unscored —
Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbi…
-
Unscored —
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag…
-
Unscored —CVE-2004-0205 EPSS 24%
Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the…
-
Unscored —
Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which al…
-
Unscored —
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, a…
-
High 7.8
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain p…
KEV Mar 3, 2022 -
Unscored —CVE-2004-0215 EPSS 16%
Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e…
-
Unscored —
The Equalizer Load-balancer for serial network interfaces (eql.c) in Linux kernel 2.6.x up to 2.6.7 allows local users …
-
Unscored —CVE-2004-0201 EPSS 45%
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP…
-
Unscored —
The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP…
-
Unscored —
BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows att…
-
Unscored —
Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, …
-
Unscored —
Off-by-one error in the POP3_readmsg function in popclient 3.0b6 allows remote attackers to cause a denial of service (…
-
Unscored —
Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" modul…
-
Unscored —CVE-2004-0665 Public exploit
csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which revea…
-
Unscored —
Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows rem…
-
Unscored —
Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service (temporary hang…
-
Unscored —
Prestige 650HW-31 running Rompager 4.7 software allows remote attackers to cause a denial of service (device reboot) vi…
-
Unscored —CVE-2004-0672 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityM…
-
Unscored —
WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allow…
-
Unscored —CVE-2004-0668 Public exploit
Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service (server crash) via a large e-mail…
-
Unscored —
Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a …
-
Unscored —
Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) …
-
Unscored —
Lotus Domino 6.5.0 and 6.5.1, with IMAP enabled, allows remote authenticated users to change their quota by using the I…
-
Unscored —CVE-2004-0664 Public exploit
Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directori…
-
Unscored —
Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open, and sys_mknod inside ja…
-
Unscored —CVE-2004-0671 Public exploit
Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying …
-
Unscored —CVE-2004-0673 Public exploit
Cross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary we…
-
Unscored —
Buffer overflow in write_packet in control.c for l2tpd may allow remote attackers to execute arbitrary code.