CVE-2004-2346

CVE-2004-2346 affects Forum Web Server 1.6 and earlier, with two XSS vectors: (1) Subject field in post1.htm and (2) File Description field in postfile2.htm. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Documents describe the issue but do not provide mitigatio...

CVE-2004-2345

Oracle9i Database Server versions 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4 are affected by unknown local vulnerabilities that allow a user with SQL access to cause a denial of service or to obtain sensitive information. The available documents confirm the affected product versions and the general i...

CVE-2004-2306

Technical details for CVE-2004-2306 are not publicly available in the provided documents. Monitor for updates from official advisories to confirm affected products, impact, and fixes.

CVE-2004-2327

CVE-2004-2327 affects Vizer Web Server 1.9.1. A remote attacker can cause a denial of service (server crash) by sending multiple malformed requests, including requests without GET, GET requests without HTTP, or excessively long GET requests. The CVSS/metrics indicate a network-exposed vector with...

CVE-2004-2326

The CVE-2004-2326 entry documents a SQL injection vulnerability in the IP3 Networks NetAccess Appliance that allows remote attackers to bypass authentication via the login or password fields. Affected firmware versions are listed as before 3.1.18b13, with a note that 4.0.34 is also affected. The ...

CVE-2004-2318

The administrative interface surgeftpmgr.cgi for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service crash via requests with two percent % signs in the CMD parameter...

CVE-2004-2350

SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the searchresults parameter...

CVE-2004-2334

CVE-2004-2334 affects EMU WebMail 5.2.7. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML through: (1) a hex-encoded value to the variable parameter in emumail.fcgi, (2) the folder parameter in emumail.f...

CVE-2004-2338

OpenBSD 3.3 and 3.4 contain a parsing issue in access control rules (Accept/Deny) for big-endian 64-bit platforms such as SPARC64 when rules lack netmasks. This can allow remote attackers to bypass access restrictions. The CVE description consistently notes the condition and affected OS versions;...

CVE-2004-2372

Bochs

CVE-2004-2359

The CVE-2004-2359 entry affects Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0. The flaw is that the TrayApplet does not properly drop SYSTEM privileges when started from the systray applet, allowing local users to escalate privileges by using the Help functionality. Root cause...

CVE-2004-2348

Sybari AntiGen for Domino 7.0 Build 722 SR2 allows remote attackers to cause a denial of service hang via an encrypted ZIP file with the "include full path info" option set, as used by certain variants of the Beagle/Bagle worm...

CVE-2004-2309

CVE-2004-2309 affects Crob FTP Server 3.5.1. A directory traversal vulnerability allows local users to browse outside the FTP root via multiple ../ in the DIR command. According to NVD, the impact is partial confidentiality with local access and no authentication barriers; no exploitation details...

CVE-2004-2342

CVE-2004-2342 affects ChatterBox 2.0. A remote attacker can cause a DoS by sending a malformed request to the server (e.g., using "aaaaaa"), leading to a server crash. No remediation or patch details are provided in the supplied documents.

CVE-2004-2340

Technical details about CVE-2004-2340 are not publicly available in the provided connected documents; the entry remains unverified in accessible sources. Monitor for updates.

CVE-2004-2318

The CVE-2004-2318 vulnerability affects SurgeFTP Server versions 1.0b to 2.2k1 and is triggered through the administrative interface, surgeftpmgr.cgi. A crafted request containing two percent (%) signs in the CMD parameter can cause a crash, resulting in a temporary denial of service. The availab...

CVE-2004-2360

The CVE-2004-2360 issue affects Targem Battle Mages 1.0 server software. A UDP packet with incomplete data can cause the server to enter an infinite loop while waiting for the remaining data, resulting in a remote denial of service (availability impact). Exploitation details are not provided in t...

CVE-2004-2353

BugPort prior to 1.099 stores its configuration file (conf/config.conf) under the web document root with an unparsed file extension, enabling remote disclosure of sensitive information. Affected product: BugPort (versions before 1.099). Root cause: sensitive config file placed in a location serve...

CVE-2004-2339

CVE-2004-2339 affects Microsoft Windows 2000, XP, and possibly 2003. The vulnerability allows local users with SeDebugPrivilege to execute arbitrary code at kernel level and read/write kernel memory via NtSystemDebugControl, with argument pointer verification not performed. The issue is local and...

CVE-2004-2311

CVE-2004-2311: Directory traversal in webadmin.nsf (Lotus Domino R6 6.5.1) allows local users to create folders or check for files via a .. in the new folder dialog. Affected: Lotus Domino Web Admin (webadmin.nsf). Root cause: directory traversal through dot-dot in UI. Exploitation status and pat...