CVE-2004-2261

CVE-2004-2261 is an XSS vulnerability in the e107 content management system. The issue allows remote attackers to inject arbitrary script or HTML via the login name/author field in the News Submit or Article Submit functions. The connected sources confirm the vulnerability details but do not prov...

CVE-2004-2271

CVE-2004-2271 affects MiniShare webserver versions 1.4.1 and earlier. The vulnerability is a remote buffer overflow in the HTTP request handling, originally demonstrated via a long GET request, which can be exploited to execute arbitrary code. Connected exploits and payloads show that not only GE...

CVE-2004-2265

UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact...

CVE-2004-2264

Format string bug in the openaltfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a...

CVE-2004-2262

CVE-2004-2262 describes an unauthenticated remote code execution in the e107 CMS, via the ImageManager “images.php” upload parameter. The root cause is improper validation of uploaded file types, allowing a PHP file to be uploaded and executed on the server. Affected software: e107 ImageManager i...

CVE-2004-2284

CVE-2004-2284 affects OpenWebmail prior to 2.32 (vacation.pl). The read_list_from_file function in vacation.pl allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument, enabling remote code execution with the web server’s privileges. OpenVAS and Nessus...

CVE-2004-2280

CVE-2004-2280 affects IBM Lotus Notes 6.5.x (before 6.5.3) and 6.0.x (before 6.0.5). It is a buffer overflow vulnerability that could allow remote attackers to cause a denial of service (crash) via unknown vectors related to Java applets (identified by KSPR62F4KN). The connected documents provide...

CVE-2004-2278

Vulnerability: vHost

CVE-2004-2258

Technical details are not publicly available in the provided documents. Monitor for updates from official advisories and CVE records for any new information or remediation guidance.

CVE-2004-2277

CVE-2004-2277: A buffer overflow vulnerability in the aGSM Half-Life client allows a remote Half-Life server to crash the client and potentially execute arbitrary code via a long server response. Affected software: aGSM Half-Life client. Root cause: unspecified in the provided documents beyond a ...

CVE-2004-2275

i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter...

CVE-2004-2282

DansGuardian prior to 2.7.7-2 is affected. The vulnerability allows remote attackers to bypass URL filters by using a ".." sequence in the request, exploiting the URL-filtering logic. The affected software is DansGuardian; no explicit exploit code or in‑the‑wild exploit details are provided in th...

CVE-2004-2253

Directory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote attackers to read arbitrary files via a .. in the page parameter of the show command...

CVE-2004-2251

The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it easier for remote attackers to construct specialized attacks...

CVE-2004-2236

Technical details are not publicly available in the provided documents for CVE-2004-2236; the only information is that Moodle before 1.3.3 has an unknown vulnerability related to language setting. Monitor for updates.

CVE-2004-2232

The CVE covers Moodle

CVE-2004-2253

CVE-2004-2253 describes a directory traversal in SurgeLDAP’s web component. Affected: SurgeLDAP 1.0g and earlier. Issue: an attacker can exploit a ".." in the page parameter of the show command in user.cgi to read arbitrary files from the server. The connected documents corroborate this file-disc...

CVE-2004-2233

Technical details for CVE-2004-2233 are not publicly available in the provided documents. Monitor for updates as more information may be published.

CVE-2004-2230

CVE-2004-2230 : Heap-based buffer overflow in isakmpd on OpenBSD 3.4–3.6 allows local users to trigger a denial of service (panic) and memory corruption via IPSEC credentials on a socket. Affected software: OpenBSD’s isakmpd (versions 3.4–3.6). Root cause: heap-based overflow in handling IPSEC cr...

CVE-2004-2214

The affected component is the Mbedthis AppWeb HTTP server, with versions prior to 1.1.3 vulnerable. The issue allows remote attackers to bypass access restrictions by a URI containing mixed-case characters. Remediation: upgrade to version 1.1.3 or later. No exploit details are provided in the sou...