Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
563 results · Feed
-
Unscored —CVE-2002-0188 EPSS 16%
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposi…
-
Unscored —CVE-2002-0400 EPSS 14%
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that…
-
Unscored —
Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted files via…
-
Unscored —
Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protoco…
-
Unscored —
Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHC…
-
Unscored —
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator sessi…
-
Unscored —
Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote a…
-
Unscored —CVE-2002-0864 EPSS 16%
The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service…
-
Unscored —
Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users …
-
Unscored —CVE-2002-0867 EPSS 27%
Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service …
-
Unscored —
Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a lon…
-
Unscored —
The TFTP server for Red-M 1050 (Bluetooth Access Point) can not be disabled and makes it easier for remote attackers to…
-
Unscored —CVE-2002-0729 EPSS 11%
Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is miss…
-
Unscored —
Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute …
-
Unscored —CVE-2002-0444 EPSS 12%
Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply gr…
-
Unscored —
Red-M 1050 (Bluetooth Access Point) publicizes its name, IP address, and other information in UDP packets to a broadcas…
-
Unscored —CVE-2002-0865 EPSS 20%
A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, …
-
Unscored —
Red-M 1050 (Bluetooth Access Point) PPP server allows bonded users to cause a denial of service and possibly execute ar…
-
Unscored —
The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow re…
-
Unscored —CVE-2002-0895 Public exploit
Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly exec…
-
Unscored —CVE-2002-0696 EPSS 12%
Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attacker…
-
Unscored —CVE-2002-0313 Public exploit
Buffer overflow in Essentia Web Server 2.1 allows remote attackers to cause a denial of service, and possibly execute a…
-
Unscored —
The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via…
-
Unscored —CVE-2002-0158 Public exploit
Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color datab…
-
Unscored —
The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-…
-
Unscored —
The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) vi…
-
Unscored —
dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote a…
-
Unscored —
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore th…
-
Unscored —
Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a lo…
-
Unscored —CVE-2002-0694 EPSS 14%
The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server E…
-
Unscored —
Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode rest…
-
Unscored —
Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local …
-
Unscored —
Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute scri…
-
Unscored —
Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted docum…
-
Unscored —
scrollkeeper-get-cl in ScrollKeeper 0.3 to 0.3.11 allows local users to create and overwrite files via a symlink attack…
-
Unscored —CVE-2002-0651 EPSS 13%
Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote mali…
-
Unscored —
The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows authenticated users to…
-
Unscored —
The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with ph…
-
Unscored —
The Windows Media Active Playlist in Microsoft Windows Media Player 7.1 stores information in a well known location on …
-
Unscored —
Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary code.