Skip to content
OpenAdvisories

Archive

1 September 2004

Vulnerabilities first published on this day (UTC), newest first.

  1. 1480
  2. 27
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 108
  11. 11 
  12. 12 
  13. 13 
  14. 1414
  15. 15 
  16. 16 
  17. 1713
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2437
  25. 25 
  26. 26 
  27. 27 
  28. 284
  29. 29 
  30. 30 

117 results · Clear filters · Feed

  • Unscored —
    CVE-2002-1113 Public exploit

    summary_graph_functions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modif…

  • Unscored —
    CVE-2002-1381 Public exploit

    Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative use…

  • Unscored —
    CVE-2002-1179 Public exploit EPSS 22%

    Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to ex…

  • Unscored —
    CVE-2002-1236 Public exploit

    The remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote at…

  • Unscored —
    CVE-2002-1494 Public exploit

    Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or scrip…

  • Unscored —
    CVE-2002-1468 Public exploit

    Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root.

  • Unscored —
    CVE-2002-1364 Public exploit

    Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOI…

  • Unscored —
    CVE-2002-1447 Public exploit

    Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative pri…

  • Unscored —
    CVE-2002-1529 Public exploit

    Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfContro…

  • Unscored —
    CVE-2002-1414 Public exploit

    Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment varia…

  • Unscored —
    CVE-2002-1493 Public exploit

    Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script…

  • Unscored —
    CVE-2002-1505 Public exploit

    SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers t…

  • Unscored —
    CVE-2002-1337 Public exploit EPSS 73%

    Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted addr…

  • Unscored —
    CVE-2002-1549 Public exploit EPSS 11%

    Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET reque…

  • Unscored —
    CVE-2002-1183 Public exploit EPSS 19%

    Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing …

  • Unscored —
    CVE-2002-1169 Public exploit

    IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2002-1142 Public exploit EPSS 76%

    Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 t…

  • Unscored —
    CVE-2002-1405 Public exploit

    CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTT…

  • Unscored —
    CVE-2002-1318 Public exploit EPSS 52%

    Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute …

  • Unscored —
    CVE-2002-1248 Public exploit

    Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to caus…

  • Unscored —
    CVE-2002-1501 Public exploit

    The MPS functionality in Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10 allows remote attackers to ca…

  • Unscored —
    CVE-2002-1250 Public exploit

    Buffer overflow in Abuse 2.00 and earlier allows local users to gain root privileges via a long -net command line argum…

  • Unscored —
    CVE-2002-1307 Public exploit

    Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML…

  • Unscored —
    CVE-2002-1178 Public exploit

    Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execu…

  • Unscored —
    CVE-2002-1514 Public exploit

    gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "…

  • Unscored —
    CVE-2002-1435 Public exploit

    class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2002-1349 Public exploit

    Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a l…

  • Unscored —
    CVE-2002-1361 Public exploit EPSS 12%

    overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers t…

  • Unscored —
    CVE-2002-1220 Public exploit

    BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) vi…

  • Unscored —
    CVE-2002-1380 Public exploit

    Linux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT_REA…

  • Unscored —
    CVE-2002-1135 Public exploit

    modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP sou…

  • Unscored —
    CVE-2002-1412 Public exploit EPSS 39%

    Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a mod…

  • Unscored —
    CVE-2002-1496 Public exploit EPSS 23%

    Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2002-1497 Public exploit

    Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitr…

  • Unscored —
    CVE-2002-1513 Public exploit

    The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via…

  • Unscored —
    CVE-2002-1222 Public exploit

    Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote att…

  • Unscored —
    CVE-2002-1187 Public exploit EPSS 15%

    Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and exec…

  • Unscored —
    CVE-2002-1123 Public exploit EPSS 78%

    Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 a…

  • Unscored —
    CVE-2002-1320 Public exploit

    Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email …

  • Unscored —
    CVE-2002-1463 Public exploit

    Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/12…