CVE-2004-2471

SQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2004-2476

The vulnerability CVE-2004-2476 affects Microsoft Internet Explorer 6.0. A remote attacker can induce a denial-of-service by embedding an IFRAME whose source is the character "?"; this leads to an infinite loop and browser crash. The available documents confirm the affected product and the failur...

CVE-2004-2436

The vulnerability in Computer Associates Unicenter Common Services 3.0 and earlier stems from storing the SA database password in cleartext inside the TndAddNspTmp.bat file, enabling local privilege escalation. Affected software: Unicenter Common Services 3.0 and earlier. Root cause: cleartext cr...

CVE-2004-2449

CVE-2004-2449 affects Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier. The issue is a remote denial of service via a long, malformed UDP datagram, leading to an application crash. This vulnerability is documented in NVD and CVE records with a base score of 5.0 (Mediu...

CVE-2004-2475

The CVE-2004-2475 entry concerns a cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 that could allow remote scripts to be injected via about.html in the About section. The connected documentation notes that demonstrations using the res:// protocol may not cross privilege bound...

CVE-2004-2446

CVE-2004-2446 describes a directory traversal vulnerability in 1st Class Mail Server 4.01, enabling remote attackers to read arbitrary files via dot-dot sequences. The initial records indicate the affected product and impact (read access to files) but do not provide exploit vectors, affected vers...

CVE-2004-2471

The CVE-2004-2471 entry describes an SQL injection in the sloth TCL script of QuoteEngine prior to 1.2.0, enabling remote attackers to execute arbitrary SQL via unknown vectors. The vulnerability affects the QuoteEngine component and is documented with a high impact score (base 7.5; Confidentiali...

CVE-2004-2474

CVE-2004-2474 affects PHPNews 1.2.3. The vulnerability is a SQL injection via the mid parameter in sendtofriend.php, allowing a remote attacker to execute arbitrary SQL commands. The provided documents do not specify a fixed version or concrete remediation; one NASL entry suggests upgrading PHP, ...

CVE-2004-2465

CVE-2004-2465 describes an XSS vulnerability in Easy Chat Server 1.2, specifically in the chat.ghp component, where the username parameter can be exploited to inject arbitrary web script or HTML. The NVD entry notes a network-exposed vulnerability with no confidentiality impact, partial integrity...

CVE-2004-2444

Cross-site scripting XSS vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2004-2452

Technical details for CVE-2004-2452 are not publicly provided in the supplied documents; no concrete exploit, affected versions, or remediation are detailed here. Monitor for updates.

CVE-2004-2463

Buffer overflow in ADA Image Server ImgSvr 0.4 allows remote attackers to cause a denial of service web server crash or execute arbitrary code via a long GET request...

CVE-2004-2472

Agnitum Outpost Pro Firewall 2.1 is affected by CVE-2004-2472. Remote attackers can cause a denial of service by flooding the firewall with small, invalid packets, which Outpost Pro cannot process quickly enough, leading to partial availability impact. The description does not provide root-cause ...

CVE-2004-2454

CVE-2004-2454 affects aMSN 0.90 for Windows . The vulnerability allows local users to obtain sensitive information, specifically hashed passwords, from hotlog.htm and config.xml . The root cause is described at a high level as an information-disclosure flaw; explicit technical details such as exa...

CVE-2004-2455

The CVE-2004-2455 entry concerns the Sweex LC000060 Wireless Broadband Router/Accesspoint (802.11g). The vulnerability allows remote attackers to obtain sensitive information and potentially gain privileges by using TFTP to download the nvram file, from which username, password, and other data ca...

CVE-2004-2442

Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antiviru...

CVE-2004-2440

The CVE-2004-2440 entry concerns proxytunnel (pre-1.1.3) with an unspecified vulnerability in the cmdline.c component that allows a local attacker to obtain proxy credentials (username or password) of other users. Affected software is proxytunnel, version

CVE-2004-2438

PHP-Fusion 4.01 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the Submit News, Submit Link, or Submit Article fields. The CVE-2004-2438 entry documents this XSS issue across multiple input points but provides limi...

CVE-2004-2460

CVE-2004-2460 affects gnubiff’s POP3 handling prior to version 2.0.0. The issue allows remote attackers to cause a denial-of-service (application crash) by sending an malformed or intentionally large/“infinite” UIDL list. The underlying root cause is not detailed in the provided documents. The en...

CVE-2004-2470

Technical details about CVE-2004-2470 are not publicly available in the provided documents; no specifics on affected product versions, impact, or vectors are given. Monitor for updates.