Archive
December 2004
Vulnerabilities first published in this month (UTC), newest first.
245 results · Feed
-
Unscored —
Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more than 4GB of memory, could allow lo…
-
Unscored —CVE-2004-1221 Public exploit
Directory traversal vulnerability in weblibs.pl in WebLibs 1.0 allows remote attackers to read arbitrary files via .. s…
-
Unscored —
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of…
-
Unscored —
Firefox and Mozilla allow remote attackers to cause a denial of service (application crash from memory consumption), as…
-
Unscored —
parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensi…
-
Unscored —CVE-2004-1225 Public exploit
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption…
-
Unscored —
SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to s…
-
Unscored —
codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohig…
-
Unscored —
Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2004-1212 Public exploit
Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arb…
-
Unscored —CVE-2004-1196 Public exploit
Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to inject arbitrary web …
-
Unscored —
Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash from memory consump…
-
Unscored —
Prevx Home 1.0 allows local users with administrator privileges to bypass the intrusion prevention features by directly…
-
Unscored —
Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMO…
-
Unscored —CVE-2004-1220 Public exploit
Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a …
-
Unscored —
Stack-based buffer overflow in the code that sends images in Gadu-Gadu allows remote attackers to execute arbitrary cod…
-
Unscored —CVE-2004-1194 Public exploit
Buffer overflow in Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (applica…
-
Unscored —CVE-2004-1213 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Advanced Guestbook 2.3.1, 2.2, and possibly other versions all…
-
Unscored —
Cross-site scripting (XSS) vulnerability in inshop.pl in Insite inShop allows remote attackers to inject arbitrary web …
-
Unscored —
Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw socket…
-
Unscored —
Remote Execute 2.30 allows remote attackers to cause a denial of service (application crash) by making 7 simultaneous c…
-
Unscored —CVE-2004-1210 Public exploit
Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote atta…
-
Unscored —CVE-2004-1208 Public exploit
Buffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service (application crash) and p…
-
Unscored —
FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service (application crash) by calling Xman…
-
Unscored —CVE-2004-1207 Public exploit
The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serio…
-
Unscored —
weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFil…
-
Unscored —CVE-2004-1173 EPSS 12%
Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in …
-
Unscored —
paFileDB 3.1, when using sessions authentication and while the administrator logs on, allows remote attackers to read t…
-
Unscored —CVE-2004-1215 Public exploit
Kreed 1.05 and earlier allows remote attackers to cause a denial of service (server disconnect) via a long UDP packet, …
-
Unscored —CVE-2004-1223 Public exploit
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such a…
-
Unscored —
Cross-site scripting vulnerability in the parser for Gadu-Gadu allows remote attackers to inject arbitrary web script o…
-
Unscored —
Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers,…
-
Unscored —
Opera 7.54 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstr…
-
Unscored —CVE-2004-1195 Public exploit
Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a j…
-
Unscored —
Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. (dot dot) sequenc…
-
Unscored —
Integer overflow in Gadu-Gadu allows remote attackers to cause a denial of service (disk consumption) via a user packet…
-
Unscored —CVE-2004-0993 EPSS 10%
Buffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service (application crash) or possi…
-
Unscored —
Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not proper…
-
Unscored —
The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote …