Archive
July 2004
Vulnerabilities first published in this month (UTC), newest first.
121 results · Feed
-
Unscored —CVE-2004-0676 Public exploit
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to …
-
Unscored —CVE-2004-0678 Public exploit
Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to exe…
-
Unscored —
PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP request…
-
Unscored —CVE-2004-0648 Public exploit
Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in modules.php in PowerPortal 1.x allows remote attackers to inject arbitrary …
-
Unscored —CVE-2004-0683 Public exploit
Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a co…
-
Unscored —
UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and…
-
Unscored —CVE-2004-0656 Scanner template
The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by excee…
-
Unscored —CVE-2004-0681 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffi…
-
Unscored —
eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearch…
-
Unscored —CVE-2004-0660 Public exploit
Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in C…
-
Unscored —CVE-2004-0675 Public exploit
Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote atta…
-
Unscored —
Unknown vulnerability in Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03 allows remote attackers to cause a d…
-
Unscored —
Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2004-0682 Public exploit
comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to …
-
Unscored —
Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or th…
-
Unscored —
Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote …
-
Unscored —
shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink a…
-
Unscored —
Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a…
-
Unscored —
Format string vulnerability in the SSL_set_verify function in telnetd.c for SSLtelnet daemon (SSLtelnetd) 0.13 allows r…
-
Unscored —
Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown imp…
-
Unscored —CVE-2004-0639 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject…
-
Unscored —
The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication …
-
Unscored —
Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify …
-
Unscored —
The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could …
-
Unscored —
Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication via…
-
Unscored —
Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service …
-
Unscored —
The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exi…
-
Unscored —
Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memor…
-
Unscored —
The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process cras…
-
Unscored —
Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to exec…
-
Unscored —
The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (proc…
-
Unscored —
The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abo…
-
Unscored —
WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arb…
-
Unscored —
Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute a…
-
Unscored —
Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a di…
-
Unscored —
WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arb…
-
Unscored —
The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules,…
-
Unscored —CVE-2004-0497 Public exploit
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported f…
-
Unscored —CVE-2002-1581 Public exploit
Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view…