Skip to content
OpenAdvisories

Archive

September 2004

Vulnerabilities first published in this month (UTC), newest first.

← August 2004 2004 / September October 2004 →
  1. 1480
  2. 27
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 108
  11. 11 
  12. 12 
  13. 13 
  14. 1414
  15. 15 
  16. 16 
  17. 1713
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2437
  25. 25 
  26. 26 
  27. 27 
  28. 284
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

125 results · Clear filters · Feed

  • Unscored —
    CVE-2002-1496 Public exploit EPSS 23%

    Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2002-1497 Public exploit

    Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitr…

  • Unscored —
    CVE-2002-1513 Public exploit

    The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via…

  • Unscored —
    CVE-2002-1222 Public exploit

    Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote att…

  • Unscored —
    CVE-2002-1187 Public exploit EPSS 15%

    Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and exec…

  • Unscored —
    CVE-2002-1123 Public exploit EPSS 78%

    Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 a…

  • Unscored —
    CVE-2002-1320 Public exploit

    Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email …

  • Unscored —
    CVE-2002-1463 Public exploit

    Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/12…

  • Unscored —
    CVE-2002-1214 Public exploit EPSS 50%

    Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2002-1230 Public exploit

    NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute…

  • Unscored —
    CVE-2002-1239 Public exploit

    QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised…

  • Unscored —
    CVE-2002-1211 Public exploit

    Prometheus 6.0 and earlier allows remote attackers to execute arbitrary PHP code via a modified PROMETHEUS_LIBRARY_BASE…

  • Unscored —
    CVE-2002-1469 Public exploit

    scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remot…

  • Unscored —
    CVE-2002-1224 Public exploit

    Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary fil…

  • Unscored —
    CVE-2002-1374 Public exploit EPSS 20%

    The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileg…

  • Unscored —
    CVE-2002-1530 Public exploit

    The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames an…

  • Unscored —
    CVE-2002-1375 Public exploit EPSS 24%

    The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2002-1560 Public exploit EPSS 10%

    index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting t…

  • Unscored —
    CVE-2002-1317 Public exploit EPSS 24%

    Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers …

  • Unscored —
    CVE-2002-1436 Public exploit

    The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl co…

  • Medium —
    CVE-2002-1148 Public exploit EPSS 19%

    Apache Tomcat Source Code Disclosure

    The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2002-1242 Public exploit

    SQL injection vulnerability in PHP-Nuke before 6.0 allows remote authenticated users to modify the database and gain pr…

  • Unscored —
    CVE-2002-1147 Public exploit

    The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remo…

  • Unscored —
    CVE-1999-0718 Public exploit

    IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privil…

  • Unscored —
    CVE-1999-1520 Public exploit EPSS 12%

    A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker t…

  • Unscored —
    CVE-2000-0797 Public exploit

    Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option.

  • Unscored —
    CVE-2003-0009 Public exploit EPSS 16%

    Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to…

  • Unscored —
    CVE-2003-0108 Public exploit EPSS 11%

    isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) vi…

    tcpdump Debian
  • Unscored —
    CVE-2003-0107 Public exploit EPSS 26%

    Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are…

    zlib Debian
  • Unscored —
    CVE-2003-0004 Public exploit

    Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code…

  • Unscored —
    CVE-2003-0125 Public exploit EPSS 11%

    Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a d…

  • Unscored —
    CVE-2003-0019 Public exploit

    uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local user…

  • Unscored —
    CVE-2003-0124 Public exploit

    man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes …

  • Unscored —
    CVE-2003-0143 Public exploit

    The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprin…

  • Unscored —
    CVE-2003-0100 Public exploit

    Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute…

  • Unscored —
    CVE-2003-0003 Public exploit EPSS 43%

    Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Window…

  • Unscored —
    CVE-2003-0002 Public exploit EPSS 23%

    Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 …

  • Unscored —
    CVE-2003-0050 Public exploit EPSS 69%

    parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote …

  • Unscored —
    CVE-2003-0078 Public exploit EPSS 14%

    ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an …

    openssl Debian
  • Unscored —
    CVE-2003-0027 Public exploit EPSS 26%

    Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allo…