Skip to content
OpenAdvisories

Archive

19 November 2004

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 45
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 91
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 166
  17. 17 
  18. 183
  19. 1926
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2411
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 

26 results · Feed

  • Unscored —

    Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with …

  • Unscored —
    CVE-2004-0933 Public exploit EPSS 21%

    Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and…

  • Unscored —

    Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a f…

  • Unscored —

    changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authen…

  • Unscored —
    CVE-2004-0936 Public exploit EPSS 15%

    RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global h…

  • Unscored —

    Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2)…

  • Unscored —

    The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (in…

  • Unscored —

    Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary co…

  • Unscored —

    Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote atta…

  • Unscored —

    The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause…

  • Unscored —

    Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execu…

  • Unscored —

    distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which…

  • Unscored —

    The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions…

  • Unscored —

    Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local use…

  • Unscored —
    CVE-2004-0937 Public exploit EPSS 15%

    Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attacker…

  • Unscored —
    CVE-2004-0935 Public exploit EPSS 15%

    Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compres…

  • Unscored —
    CVE-2004-0932 Public exploit EPSS 64%

    McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 200…

  • Unscored —

    Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which …

  • Unscored —

    The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirem…

  • Unscored —

    Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a c…

  • Unscored —
    CVE-2004-0941 EPSS 11%

    Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute a…

  • Unscored —
    CVE-2004-0934 Public exploit EPSS 15%

    Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and g…

  • Unscored —

    The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadabl…

  • Unscored —
    CVE-2004-0882 EPSS 14%

    Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute…

  • Unscored —

    Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary c…

  • Unscored —
    CVE-2004-1037 Public exploit EPSS 62%

    The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in…