Skip to content
OpenAdvisories

Archive

August 2004

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 21
  3. 310
  4. 43
  5. 56
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 124
  13. 13 
  14. 143
  15. 15 
  16. 16 
  17. 17 
  18. 1810
  19. 198
  20. 206
  21. 21 
  22. 22 
  23. 23 
  24. 241
  25. 254
  26. 26 
  27. 271
  28. 28 
  29. 29 
  30. 30 
  31. 31 

57 results · Feed

  • Unscored —

    Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform c…

  • Unscored —
    CVE-2004-0415 Public exploit

    Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access porti…

  • Unscored —

    The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (applicat…

  • Unscored —

    NGSEC StackDefender 1.10 allows attackers to cause a denial of service (system crash) via an invalid address for the Ob…

  • Unscored —

    NGSEC StackDefender 2.0 allows attackers to cause a denial of service (system crash) via an invalid address for the Bas…

  • Unscored —

    Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers f…

  • Unscored —

    Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface…

  • Unscored —

    The cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the h…

  • Unscored —
    CVE-2004-0760 Public exploit

    Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null charac…

  • Unscored —

    Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequ…

  • Unscored —

    Mozilla before 1.7 allows remote web servers to read arbitrary files via Javascript that sets the value of an <input ty…

  • Unscored —
    CVE-2004-0722 Public exploit EPSS 13%

    Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and p…

  • Unscored —

    Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in C…

  • Unscored —
    CVE-2004-0763 Public exploit

    Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Ja…

  • Unscored —

    Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thund…

  • Unscored —

    Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensi…

  • Unscored —
    CVE-2004-0557 Public exploit EPSS 25%

    Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 all…