8091 matches found
CVE-2004-2467
CVE-2004-2467 affects Easy Chat Server 1.2 (component: chat.ghp). The description from CVE records states that remote attackers can add a large number of fake users, eventually causing a denial of service (server crash). The connected documents corroborate this description across NVD and CVE list...
CVE-2004-2464
The CVE-2004-2464 entry concerns ADA Image Server (ImgSvr). Affected versions include 0.4 (and later notes indicate 0.6.21 and earlier are affected). The vulnerability is a directory traversal flaw in ImgSvr that allows remote attackers to read arbitrary files or list directories via hex-encoded ...
CVE-2004-2453
CVE-2004-2453 concerns Tutti Nova versions 0.10–0.12 (Beta) and 0.9.4. When PHP register_globals is enabled, the vulnerability is reported but the impact and attack vectors remain unknown in the provided documents. NVD metrics assign a high base score (10.0) with network attack vector, low comple...
CVE-2004-2473
Technical details for CVE-2004-2473 are not publicly available in the provided documents; the entries summarize a local symlink-related overwrite vulnerability without product/version specifics beyond wmFrog 0.1.6 prior to 0.2.0.
CVE-2004-2451
CVE-2004-2451 affects Roger Wilco 1.4.1.6 and earlier, and Roger Wilco Base Station 0.30a and earlier. The vulnerability allows remote attackers to send audio to arbitrary channels (the "Voices from the deep" bug). The NVD CVSS v2 entry notes network access, low access complexity, no authenticati...
CVE-2004-2469
The CVE-2004-2469 entry concerns phpScheduleIt versions up to and including 1.0.1, where an unspecified issue in Reservation.class.php enables an attacker to modify or delete reservations. The vulnerability affects phpScheduleIt 1.01 and earlier and is documented across multiple sources (NVD/CVE....
CVE-2004-2462
CVE-2004-2462 affects cplay 1.49 on Linux. The vulnerability is a local symlink attack against the cplay_control temporary file, allowing local users to overwrite arbitrary files. No exploitation details or fixes are provided in the connected documents; remediation information is not available he...
CVE-2004-2459
Technical details for CVE-2004-2459 are not publicly provided in the connected documents. The sources reiterate that gnubiff 1.2.0 and earlier may expose passwords. Monitor for updates.
CVE-2004-2448
Technical details about CVE-2004-2448 are not publicly available in the provided connected documents. The initial entry describes an access-control weakness in smart.cfg but no additional product/version/exploit data is supplied here. Monitor for updates.
CVE-2004-2463
CVE-2004-2463 affects ADA Image Server (ImgSvr) 0.4. A buffer overflow in the server allows remote attackers to cause a web server crash (denial of service) or execute arbitrary code via a long GET request. The connected records corroborate the long-GET-triggered overflow as the root issue and th...
CVE-2004-2444
CVE-2004-2444 describes a cross-site scripting (XSS) flaw in index.php of Jaws 0.3, exploitable via the action parameter to inject arbitrary script/HTML. The provided documents do not include explicit vendor/version patches or a confirmed exploit in the wild. No additional technical details, root...
CVE-2004-2450
Technical details for CVE-2004-2450 are not publicly provided in the supplied documents. No affected product/version, impact, or remediation is specified beyond the general description. Monitor for updates from official advisories.
CVE-2004-2435
Cross-site scripting XSS vulnerability in PeopleSoft Human Resources Management System HRMS 7.0, when "web enabled" using HTML Access, allows remote attackers to inject arbitrary web script or HTML via unspecified 1 debugging or 2 utility scripts...
CVE-2004-2442
CVE-2004-2442 covers a multiple interpretation error in several F-Secure Anti-Virus products (including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, and Anti-Virus for Linux/Gateways 4.61 and earlier). The issue allows remote attackers to bypass an...
CVE-2004-2443
The CVE affects Jaws 0.3. An authentication bypass is possible via an HTTP request to admin.php where the cookie is set to the MD5 hash of a null password; this is compared against the logged session variable in application.php’s logged_on function. This yields a likely auth bypass with partial c...
CVE-2004-2458
Open WebMail 2.30 and earlier is affected. When use_syshomedir is disabled or create_syshomedir is enabled, the application creates new directories before authentication, enabling a remote attacker to create arbitrary directories. This is a client/server vulnerability in Open WebMail’s directory ...
CVE-2004-2461
The vulnerability is in gnubiff’s POP3 handling: a buffer overflow in pop3.c affects gnubiff before 2.0.0. The issue can cause a denial of service (crash) and may allow arbitrary code execution. Connected sources identify the affected component (pop3.c) and the version constraint (before 2.0.0), ...
CVE-2004-2435
The vulnerability CVE-2004-2435 affects PeopleSoft HRMS 7.0 when “web enabled” via HTML Access, enabling Cross-site Scripting (XSS) . The issue arises from the handling of (1) debugging and (2) utility scripts, allowing remote attackers to inject arbitrary web script or HTML. Current connected so...
