8078 matches found
CVE-2004-1342
CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method...
CVE-2004-0988
Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a denial of service memory consumption via certain inputs that cause a large memory operation...
CVE-2004-0924
NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not...
CVE-2004-0925
Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate...
CVE-2004-2779 affecting package libid3tag for versions less than 0.16.3-7
CVE-2004-2779 affecting package libid3tag for versions less than 0.16.3-7. An upgraded version of the package is available that resolves this issue...
CVE-2004-0789
creationtimestamp| type| source ---|---|--- 2025-05-08 21:02:19+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3loosp5gwvz2m...
CVE-2025-2004
The Simple WP Events plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wpedeletefile AJAX action in all versions up to, and including, 1.8.17. This makes it possible for unauthenticated attackers to delete arbitrary files on the server,...
CVE-2025-2004
creationtimestamp| type| source ---|---|--- 2025-04-08 04:46:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10845 2025-04-08 05:40:28+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmbr75tm2k2h 2025-04-08 07:01:28+00:00| seen|...
CVE-2025-2004 Simple WP Events <= 1.8.17 - Unauthenticated Arbitrary File Deletion
The Simple WP Events plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wpedeletefile AJAX action in all versions up to, and including, 1.8.17. This makes it possible for unauthenticated attackers to delete arbitrary files on the server,...
tomcat10-10.1.35-1.1 on GA media (moderate)
tomcat10-10.1.35-1.1 on GA media Announcement ID: openSUSE-SU-2025:14897-1 Rating: moderate Cross-References: CVE-2004-56337 CVE-2024-56337 CVE-2025-24813 CVSS scores: CVE-2024-56337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2025-24813 SUSE : 8.1...
Linux Distros Unpatched Vulnerability : CVE-2023-2004
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was n...
Linux Distros Unpatched Vulnerability : CVE-2013-2004
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 1 GetDatabase and 2 XimParseStringFile functions in X.org libX11 1.5.99.901 1.6 RC1 and earlier do not restrict the recursion depth when processing directiv...
Linux Distros Unpatched Vulnerability : CVE-2004-2771
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell...
Linux Distros Unpatched Vulnerability : CVE-2004-2680
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - modpython libapache2-mod-python 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to...
Linux Distros Unpatched Vulnerability : CVE-2004-2779
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - id3utf16deserialize in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop...
Multiple CURL vulnerabilities in Brocade SANnav OVA deployments before SANnav 2.3.1b
Multiple CURL vulnerabilities Curl 7.44.0 8.7.0 vulnerabilities CVE-2024-2398, CVE-2024-2466, CVE-2024-2004 & CVE-2024-0853 Curl 7.44.0 8.7.0 HTTP/2 Push Headers Memory-leak CVE-2024-2398 Curl 7.85.0 8.7.0 Input Misinterpretation CVE-2024-2004 Curl 7.85.0 8.7.0 Input Misinterpretation CVE-2024-20...
Azure Linux 3.0 Security Update: cmake / curl / mysql (CVE-2024-2004)
The version of cmake / curl / mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-2004 advisory. - When a protocol selection parameter option disables all protocols without adding any then the...
CVE-2004-2257
creationtimestamp| type| source ---|---|--- 2025-01-16 19:55:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2018...