Archive
December 2004
Vulnerabilities first published in this month (UTC), newest first.
78 results · Clear filters · Feed
-
Unscored —CVE-2004-1225 Public exploit
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2004-1212 Public exploit
Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arb…
-
Unscored —CVE-2004-1196 Public exploit
Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2004-1220 Public exploit
Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a …
-
Unscored —CVE-2004-1194 Public exploit
Buffer overflow in Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (applica…
-
Unscored —CVE-2004-1213 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Advanced Guestbook 2.3.1, 2.2, and possibly other versions all…
-
Unscored —CVE-2004-1210 Public exploit
Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote atta…
-
Unscored —CVE-2004-1208 Public exploit
Buffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service (application crash) and p…
-
Unscored —CVE-2004-1207 Public exploit
The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serio…
-
Unscored —CVE-2004-1215 Public exploit
Kreed 1.05 and earlier allows remote attackers to cause a denial of service (server disconnect) via a long UDP packet, …
-
Unscored —CVE-2004-1223 Public exploit
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such a…
-
Unscored —CVE-2004-1195 Public exploit
Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a j…
-
Unscored —
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
-
Unscored —
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execut…
-
Unscored —CVE-2004-1161 Public exploit
rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated user…
-
Unscored —CVE-2004-1165 Public exploit
Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded…
-
Unscored —CVE-2004-1020 Public exploit
The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers t…
-
Unscored —
Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service…
-
Unscored —
Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possi…
-
Unscored —
Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial …
-
Unscored —
Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code…
-
Unscored —
Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a den…
-
Unscored —CVE-2004-0996 Public exploit
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrit…
-
Unscored —
Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to b…
-
Unscored —CVE-2004-1075 Public exploit
Cross-site scripting (XSS) vulnerability in standard_error_message.dtml for Zwiki after 0.10.0rc1 to 0.36.2 allows remo…
-
Unscored —CVE-2004-1095 Public exploit
Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,…
-
Unscored —
Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in P…
-
Unscored —CVE-2004-1073 Public exploit
The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, …
-
Unscored —
Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote at…
-
Unscored —CVE-2004-1109 Public exploit
The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service …
-
Unscored —CVE-2004-1100 Public exploit
Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug…
-
Unscored —CVE-2004-1101 Public exploit
mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2004-1074 Public exploit
The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial…
-
Unscored —CVE-2004-1118 Public exploit
Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2…
-
Unscored —CVE-2004-1102 Public exploit
MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested …
-
Unscored —
Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a p…
-
Unscored —
The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows rem…