Archive
15 December 2004
Vulnerabilities first published on this day (UTC), newest first.
24 results · Clear filters · Feed
-
Unscored —CVE-2004-0894 Public exploit
LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly val…
-
Unscored —CVE-2004-1016 Public exploit
The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users t…
-
Unscored —CVE-2004-1217 Public exploit
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories b…
-
Unscored —
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local a…
-
Unscored —CVE-2004-1214 Public exploit
Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format spec…
-
Unscored —CVE-2004-1227 Public exploit
Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary …
-
Unscored —
phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers t…
-
Unscored —CVE-2004-1216 Public exploit
The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service (server f…
-
Unscored —CVE-2004-1206 Public exploit
Directory traversal vulnerability in codebrowserpntm.php in pnTresMailer 6.0.3 allows remote attackers to read arbitrar…
-
Unscored —CVE-2004-1221 Public exploit
Directory traversal vulnerability in weblibs.pl in WebLibs 1.0 allows remote attackers to read arbitrary files via .. s…
-
Unscored —
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of…
-
Unscored —CVE-2004-1225 Public exploit
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2004-1212 Public exploit
Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arb…
-
Unscored —CVE-2004-1196 Public exploit
Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2004-1220 Public exploit
Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a …
-
Unscored —CVE-2004-1194 Public exploit
Buffer overflow in Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (applica…
-
Unscored —CVE-2004-1213 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Advanced Guestbook 2.3.1, 2.2, and possibly other versions all…
-
Unscored —CVE-2004-1210 Public exploit
Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote atta…
-
Unscored —CVE-2004-1208 Public exploit
Buffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service (application crash) and p…
-
Unscored —CVE-2004-1207 Public exploit
The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serio…
-
Unscored —CVE-2004-1215 Public exploit
Kreed 1.05 and earlier allows remote attackers to cause a denial of service (server disconnect) via a long UDP packet, …
-
Unscored —CVE-2004-1223 Public exploit
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such a…
-
Unscored —CVE-2004-1195 Public exploit
Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a j…