CVE-2004-2222

The CVE-2004-2222 entry describes a directory-traversal vulnerability in FsPHPGallery prior to version 1.2, where an attacker can use the dir parameter in index.php to list arbitrary directories. Affected software: FsPHPGallery before 1.2. Cause: improper handling of the dir parameter leading to ...

CVE-2004-2232

SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements...

CVE-2004-2227

CVE-2004-2227 affects Mozilla Firefox prior to 1.0. The issue is in the file download dialog where long filenames are truncated, which can mislead users into downloading files with dangerous extensions. The documented remediation is to upgrade to Mozilla Firefox 1.0 or newer (and related Firefox/...

CVE-2004-2254

SurgeLDAP 1.0g (Build 12), and possibly earlier 1.0h, contains an authentication bypass vulnerability in the administration interface. The issue allows remote attackers to bypass login by sending a direct request to admin.cgi with a modified utoken parameter. The affected product/version informat...

CVE-2004-2245

Goollery is affected by multiple XSS in viewalbum.php (via the page parameter) and viewpic.php (via the btopage parameter). The CVE entry documents a reflected XSS vulnerability in Goollery 0.03 that allows remote attackers to inject arbitrary HTML/JS in a user’s browser. OpenVAS/Nessus entries c...

CVE-2004-2220

CVE-2004-2220 affects F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31. The vulnerability is that the product does not reliably detect certain password-protected ZIP files, allowing remote attackers to bypass antivirus protection. Affected component: ZIP/password-protected archive scannin...

CVE-2004-2218

SQL injection vulnerability in pmwh.php in PHPMyWebHosting 0.3.4 and earlier allows remote attackers to modify SQL statements via the password parameter...

CVE-2004-2213

CVE-2004-2213 affects the Mbedthis AppWeb HTTP server prior to 1.1.3. An HTTP request containing a trailing dot "." or trailing space can disclose the server-side source code of scripts to a remote attacker. The description indicates the vulnerability path is via crafted requests, enabling partia...

CVE-2004-2249

Unknown vulnerability in the "access code" in SecureEditor before 0.1.2 has unknown impact and attack vectors, possibly involving a bypass of IP address restrictions...

CVE-2004-2226

This CVE affects Mozilla Mail 1.7.1/1.7.3 and Thunderbird before 0.9. When HTML-Mails is enabled, an attacker can cause an HTML e‑mail to reference a CSS document on the attacker's server, enabling a remote attacker to determine valid e‑mail addresses. The core issue is an information-disclosure ...

CVE-2004-2247

Technical details for CVE-2004-2247 are not publicly available in the provided documents; no concrete affected product, impact, or exploit information is given. Monitor for updates.

CVE-2004-2248

Technical details about CVE-2004-2248 are not provided in the supplied documents; no concrete affected products, versions, or exploit information are disclosed. Monitor for updates.

CVE-2004-2252

The CVE-2004-2252 vulnerability affects Astaro Security Linux firewall prior to 4.024. The issue arises because the firewall sends responses to SYN-FIN packets, enabling remote attackers to glean system information and craft targeted attacks. Affected products: Astaro Security Linux versions befo...

CVE-2004-2216

Technical details about CVE-2004-2216 are not publicly available in the provided documents. Monitor for updates from additional sources; no specific affected products, root cause, or remediation are disclosed here.

CVE-2004-2238

The CVE concerns a format-string issue in vsybase.c of vpopmail versions up to 5.4.2. A follow-up note indicates the source uses constants that, when compiled, become static format strings, and this is described as not a vulnerability. No concrete impact, attack vectors, or remediation details ar...

CVE-2004-2244

The CVE-2004-2244 entry affects Oracle XML parsing in Oracle Application Server Release 2 (9i) and Database Server Release 2, across multiple versions (9.0.3.0/9.0.3.1, 9.0.2.3 and earlier, Release 1 1.0.2.x, and 9.2.0.1 and later). It describes a denial-of-service condition triggered by processi...

CVE-2004-2241

Phorum 5.0.11 and earlier is affected by a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary HTML or web script via search.php. The note indicates some sources claim the vulnerable file is read.php, but this conflicts with the vendor’s patch. The NVD entry,...

CVE-2002-2004

portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of packets...

CVE-2002-2004

CVE-2002-2004 affects the portmapper service in Compaq Tru64 operating system versions 4.0G and 5.0A. The root issue described in the connected records is a denial-of-service condition triggered by a flood of packets sent to the portmapper, exploitable remotely without authentication. This vulner...

Fedora Core 4 : krb5-1.4.1-5 (2005-553)

A double-free flaw was found in the krb5recvauth routine which may be triggered by a remote unauthenticated attacker. Fedora Core 4 contains checks within glibc that detect double-free flaws. Therefore, on Fedora Core 4, successful exploitation of this issue can only lead to a denial of service K...