CVE-2004-2094

WebcamXP 1.06.945 is affected by a cross-site scripting (XSS) vulnerability. A remote attacker can inject arbitrary HTML or web script as other users through a URL that contains the script. The description does not provide concrete details on root cause beyond the XSS flaw, nor explicit remediati...

CVE-2004-2124

The registerglobals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTPPOSTVARS variable and conduct a PHP remote file inclusion attack via the GALLERYBASEDIR parameter, a different vulnerability than CVE-2002-1412...

CVE-2004-2105

CVE-2004-2105 affects the webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0. An attacker can read arbitrary .htt files by providing a full pathname in the error parameter, indicating a path traversal flaw in error handling. The vulnerability potentially exposes sensitive files (p...

CVE-2004-2098

Cross-site scripting XSS vulnerability in the banner engine TBE 5.0 allows remote attackers to execute arbitrary script as other users via the HTML banner view/preview capability...

CVE-2004-2111

Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename...

CVE-2004-2096

Technical details about CVE-2004-2096 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-2114

ProxyNow! 2.75 and earlier suffer stack-based and heap-based buffer overflows that enable remote code execution when processing a GET request containing a long ftp:// URL. Affected component is the server’s input handling for GET requests; root cause is improper bounds checking on the ftp URL in ...

CVE-2004-2113

BremsServer 1.2.4 is affected by an XSS vulnerability that allows a remote attacker to inject arbitrary web script or HTML via the URL. The impact is partial integrity violation with no confidentiality or availability impact as per the CVE metrics; no specific exploit details or patches are provi...

CVE-2004-2128

CVE-2004-2128 concerns a cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 . According to the CVE records, the issue allows remote attackers to execute arbitrary script as other users by crafting a malicious query string to ISAPISkeleton.dll . The vulnerability is described across mu...

CVE-2004-2102

Cross-site scripting XSS vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inject arbitrary web script or HTML via the test parameter...

CVE-2004-2118

CVE-2004-2118 affects Tiny Server 1.1. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a GET request with a long filename, possibly due to a buffer overflow. The provided documents do not include a confirmed patch or fix version. No exploitation details o...

CVE-2004-2132

PJ CGI Neo’s PJreview_Neo.cgi is affected by a directory traversal vulnerability that allows reading arbitrary files via a .. in the p parameter. This could enable reading local files on the web server with the web user’s privileges. The issue is documented in CVE-2004-2132 and is reflected in Ne...

CVE-2004-2119

The CVE-2004-2119 entry documents a Cross-site scripting (XSS) vulnerability in Tiny Server 1.1, where an attacker can inject arbitrary web script or HTML via the URL. The vulnerability affects Tiny Server 1.1’s URL handling and has a base severity of MEDIUM (CVSS v2: 4.3) with network attack vec...

CVE-2004-2126

CVE-2004-2126 affects BlackICE PC Protection 3.6 and earlier. The upgrade sets insecure permissions on INI files (blackice.ini, firewall.ini, protect.ini, sigs.ini), allowing local users to modify BlackICE configuration and, via vulnerabilities in the INI parsers, potentially execute arbitrary co...

CVE-2004-2120

Technical details about CVE-2004-2120 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-2121

CVE-2004-2121 affects Borland Web Server (BWS) 1.0b3 and earlier. It exposes directory-traversal vulnerabilities through untrusted URL sequences (e.g., multiple dots '......' or encoded '..') that allow remote attackers to read/download arbitrary files. No exploitation details or fixes are provid...

CVE-2004-2131

CVE-2004-2131 affects IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier. The flaw is a stack-based buffer overflow in ontape triggered by a long ONCONFIG environment variable, allowing local users with DSA privileges to execute arbitrary code. Affected component is ontape; root cause is unch...

CVE-2004-2109

CVE-2004-2109 describes multiple cross-site scripting (XSS) vulnerabilities in the Q-Shop application, specifically in the components (1) imagezoom.asp and (2) recommend.asp. The attacker can leverage these flaws to execute arbitrary JavaScript in a victim’s browser and potentially steal the user...

CVE-2004-2106

CVE-2004-2106 involves the Novell NetWare Enterprise Web Server (versions 5.1 and 6.0). The vulnerability allows remote attackers to list directories by making direct requests to /com/, /com/novell/, /com/novell/webaccess, or /ns-icons/. The available connected documents confirm the affected prod...

CVE-2004-2134

CVE-2004-2134 affects Oracle TopLink Mapping Workbench. The vulnerability is a weak encryption of passwords, enabling local users to decrypt them. The CVSS shows local access with low complexity and partial confidentiality/integrity/availability impact. No remediation/version details are provided...