Skip to content
OpenAdvisories

Archive

14 September 2004

Vulnerabilities first published on this day (UTC), newest first.

← August 2004 2004 / September /14 October 2004 →
  1. 1480
  2. 27
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 108
  11. 11 
  12. 12 
  13. 13 
  14. 1414
  15. 15 
  16. 16 
  17. 1713
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2437
  25. 25 
  26. 26 
  27. 27 
  28. 284
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Unscored —
    CVE-2004-0752

    OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow lo…

  • Unscored —
    CVE-2004-0690

    The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP fil…

  • Unscored —
    CVE-2004-0699

    Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is impleme…

  • Unscored —
    CVE-2004-0797

    The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local user…

    zlib Debian
  • Unscored —
    CVE-2004-0807

    Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via …

    samba Debian
  • Unscored —
    CVE-2004-0842 Public exploit EPSS 57%

    Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2004-0808

    The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allow…

    samba Debian
  • Unscored —
    CVE-2004-0775

    Buffer overflow in WIDCOMM Bluetooth Connectivity Software, as used in products such as BTStackServer 1.3.2.7 and 1.4.2…

  • Unscored —
    CVE-2004-0806 Public exploit

    cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before exec…

  • Unscored —
    CVE-2004-0781

    Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast-server) 1.3.12 and ear…

  • Unscored —
    CVE-2004-0839 EPSS 34%

    Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbi…

  • Unscored —
    CVE-2004-0793

    The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, w…

    bsdmainutils Debian
  • Unscored —
    CVE-2004-0746

    Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd…

  • Unscored —
    CVE-2004-0841 Public exploit EPSS 49%

    Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.sh…