31 December 2004

24 results · Feed

• Unscored —
  CVE-2004-0567 Public exploit EPSS 69%

  The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Se…

  Dec 31, 2004
• Unscored —
  CVE-2004-0998

  Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code.

  netkit-telnet-ssl Debian
  Dec 31, 2004
• Unscored —
  CVE-2004-0452

  Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for …

  perl Debian
  Dec 31, 2004
• Unscored —
  CVE-2004-0999

  zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted m…

  Dec 31, 2004
• Unscored —
  CVE-2004-0852

  Buffer overflow in htget 0.93 allows remote attackers to execute arbitrary code via a crafted URL.

  Dec 31, 2004
• Unscored —
  CVE-2004-1062

  Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML an…

  Dec 31, 2004
• Unscored —
  CVE-2004-1189

  The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a …

  krb5 Debian
  Dec 31, 2004
• Unscored —
  CVE-2004-1315 Public exploit EPSS 73%

  viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phras…

  Dec 31, 2004
• Unscored —
  CVE-2004-1139

  Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denia…

  Dec 31, 2004
• Unscored —
  CVE-2004-1179

  The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files…

  debmake Debian
  Dec 31, 2004
• Unscored —
  CVE-2004-1234

  load_elf_binary in Linux before 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary…

  Dec 31, 2004
• Unscored —
  CVE-2004-1061

  Cross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attack…

  Dec 31, 2004
• Unscored —
  CVE-2004-1140

  Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill…

  Dec 31, 2004
• Unscored —
  CVE-2004-1145

  Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScri…

  Dec 31, 2004
• Unscored —
  CVE-2004-1296

  The (1) eqn2graph and (2) pic2graph scripts in groff 1.18.1 allow local users to overwrite arbitrary files via a symlin…

  groff Debian
  Dec 31, 2004
• Unscored —
  CVE-2004-1017

  Multiple "overflows" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors.

  Dec 31, 2004
• Unscored —
  CVE-2004-1141

  The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application …

  Dec 31, 2004
• Unscored —
  CVE-2004-1043 Public exploit EPSS 45%

  Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics"…

  Dec 31, 2004
• Unscored —
  CVE-2004-1059

  Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject …

  Dec 31, 2004
• Unscored —
  CVE-2004-1144

  Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges.

  Dec 31, 2004
• Unscored —
  CVE-2004-1317 Public exploit EPSS 60%

  Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attac…

  Dec 31, 2004
• Unscored —
  CVE-2004-1142

  Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malf…

  Dec 31, 2004
• Unscored —
  CVE-2004-1316

  Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote a…

  Dec 31, 2004
• Unscored —
  CVE-2004-1146

  Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote…

  Dec 31, 2004