Skip to content
OpenAdvisories

Archive

September 2004

Vulnerabilities first published in this month (UTC), newest first.

← August 2004 2004 / September October 2004 →
  1. 1480
  2. 27
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 108
  11. 11 
  12. 12 
  13. 13 
  14. 1414
  15. 15 
  16. 16 
  17. 1713
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2437
  25. 25 
  26. 26 
  27. 27 
  28. 284
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

563 results · Feed

  • Unscored —
    CVE-2004-0004

    The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signe…

  • Unscored —
    CVE-2004-0189 Public exploit EPSS 14%

    The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a …

    squid Debian
  • Unscored —
    CVE-2004-0044

    Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" i…

  • Unscored —
    CVE-2004-0111

    gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file.

    gdk-pixbuf Debian
  • Unscored —
    CVE-2004-0270 Public exploit EPSS 10%

    libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail me…

    clamav Debian
  • Unscored —
    CVE-2004-0194 Public exploit EPSS 11%

    Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to e…

  • Unscored —
    CVE-2004-0131

    The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause …

  • Unscored —
    CVE-2004-0099

    mksnap_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes …

  • Unscored —
    CVE-2004-0016

    The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allo…

  • Unscored —
    CVE-2004-0148

    wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by …

  • Unscored —
    CVE-2004-0191

    Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to i…

  • Unscored —
    CVE-2004-0096

    Unknown vulnerability in mod_python 2.7.9 allows remote attackers to cause a denial of service (httpd crash) via a cert…

  • Unscored —
    CVE-2004-0320

    Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to access sec…

  • Unscored —
    CVE-2004-0297 Public exploit EPSS 68%

    Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Serv…

  • Unscored —
    CVE-2004-0190

    Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may …

  • Unscored —
    CVE-2004-0068

    PHP remote file inclusion vulnerability in config.php for PhpDig 1.6.5 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2004-0070 Public exploit

    PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2004-0261 Public exploit

    oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel v…

  • Unscored —
    CVE-2004-0028

    jitterbug 1.6.2 does not properly sanitize inputs, which allows remote authenticated users to execute arbitrary command…

  • Unscored —
    CVE-2004-0347

    Cross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 (b…

  • Unscored —
    CVE-2004-0171

    FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exh…

  • Unscored —
    CVE-2004-0274

    Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is …

    eggdrop Debian
  • Unscored —
    CVE-2004-0121 Public exploit EPSS 48%

    Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when…

  • Unscored —
    CVE-2004-0159 Public exploit

    Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly e…

  • Unscored —
    CVE-2004-0169

    QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) vi…

  • Unscored —
    CVE-2004-0001

    Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allow…

  • Unscored —
    CVE-2004-0033 Public exploit

    admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a php…

  • Unscored —
    CVE-2004-0108

    The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on…

    sysstat Debian
  • Unscored —
    CVE-2004-0165

    Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows…

  • Unscored —
    CVE-2004-0160

    Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration fil…

  • Unscored —
    CVE-2004-0122 EPSS 22%

    Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read ar…

  • Unscored —
    CVE-2004-0356

    Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2004-0263

    PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled …

  • Unscored —
    CVE-2004-0126

    The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn…

  • Unscored —
    CVE-2004-0049

    Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTT…

  • Unscored —
    CVE-2004-0256

    GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on …

    libtool Debian
  • Unscored —
    CVE-2004-0031

    PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HT…

  • Unscored —
    CVE-2004-0306

    Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) e…

  • Unscored —
    CVE-2001-0951 Public exploit EPSS 27%

    Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (…

  • Unscored —
    CVE-2001-0643 Public exploit EPSS 11%

    Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow a…