CVE-2004-1945

The CVE-2004-1945 issue affects the POP3 service of Kinesphere eXchange, where a buffer overflow in the MAIL FROM handling could allow remote attackers to execute arbitrary code. The vulnerability is triggered by a long MAIL FROM field, enabling potential remote code execution with no authenticat...

CVE-2004-1839

MS Analysis module 2.0 for PHP-Nuke exposes full path disclosure via direct requests to browsers.php, mstrack.php, or title.php, enabling Information Disclosure without user interaction. Root cause: PHP error messages reveal filesystem paths. The provided documents do not specify a patched versio...

CVE-2004-1850

Technical details (affected product/version, root cause, impact, or patch) are not publicly available in the provided documents. Monitor for updates.

CVE-2004-2011

The CVE-2004-2011 entry concerns msxml3.dll in Internet Explorer 6 (IE 6.0.2600.0). The vulnerability is triggered when a remote user sends a crafted URL containing a single & (ampersand) in a link, causing a parsing error that can crash the process. Affected component: msxml3.dll; vulnerable be...

CVE-2004-1804

CVE-2004-1804 affects wMCam server 2.1.348. The issue allows a remote attacker to cause a denial of service by sending multiple malformed HTTP requests that do not contain the GET command, resulting in the server accepting no new connections. The provided documents do not specify a patch, workaro...

CVE-2004-1996

The CVE-2004-1996 issue concerns Simple Machines Forum (SMF) 1.0, where an XSS vulnerability exists in the size tag that could allow remote attackers to inject arbitrary script in web pages. References across NVD/CVE records confirm the vulnerable component is SMF 1.0 and the root cause is improp...

CVE-2004-2065

CVE-2004-2065 concerns DansGuardian 2.8 and earlier, where remote attackers can bypass the extension filtering rule by using a hex-encoded extension or a filename containing a dot. The available connected documents confirm the affected product and the bypass method, describing the underlying caus...

CVE-2004-1889

Technical details (affected software/component, root cause, impact, and remediation) are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2004-1812

CVE-2004-1812 affects Unicenter TNG 2.4, involving two executables: cam.exe and awservices.exe. The issue is multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code. The vulnerability is exploitable over the network with no authentication required. Affected ven...

CVE-2004-1954

CVE-2004-1954 affects phProfession 2.5, with a vulnerability in modules.php that allows remote injection of arbitrary script/HTML via the jcode parameter (XSS). The provided documents specify the affected file and parameter but do not include mitigation, patch versions, or concrete exploit detail...

CVE-2004-1913

The CVE-2004-1913 entry documents a cross-site scripting (XSS) vulnerability in the NukeCalendar 1.1.a module (as used in PHP-Nuke), exploitable via the eid parameter in modules.php. This allows remote attackers to inject arbitrary web script or HTML. The available references confirm the affected...

CVE-2004-1863

CVE-2004-1863 affects XMB (extreme message board) 1.9 beta/Nexus beta. The vulnerability family is cross-site scripting (XSS): remote attackers can inject arbitrary script/HTML via (1) u2uheader in editprofile.php, (2) restrict in member.php, (3) misc.php, (4) today.php, and (5) an arbitrary para...

CVE-2004-1856

CVE-2004-1856 affects HP Web JetAdmin 7.5.2546; the vulnerability is in devices_update_printer_fw_upload.hts, where, with no password configured, an attacker can remotely upload arbitrary files to the printer directory. This is a remote code/file upload issue that could lead to unauthorized modif...

CVE-2004-1799

CVE-2004-1799 describes a vulnerability in PF (packet filter) on certain OpenBSD versions where, when stateful filtering is enabled, packets for a session are not limited to the original interface. This allows a remote attacker to bypass intended packet filters by sending spoofed packets to other...

CVE-2004-1811

The CVE-2004-1811 entry concerns the SSL HTTP Server in HP Web-enabled Management Software (versions 5.0–5.92) where anonymous access enables remote attackers to replace trusted certificates by uploading their own. This could compromise certificate trust and related communications. The available ...

CVE-2004-1802

CVE-2004-1802 affects Chat Anywhere 2.72 and earlier. A remote attacker can hide their true IP address by sending %00 before the nickname, causing the IP to be displayed as $IP$ on the administration web page. This detail is supported by CVE records (CVE-2004-1802) and related databases. No addit...

CVE-2004-1867

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2004-1875

CVE-2004-1875 describes multiple XSS vulnerabilities in cPanel 9.1.0-R85 . The flaws allow remote attackers to inject arbitrary web script/HTML via nine parameters across several pages (testfile.html, erredit.html, dnslook.html, ignorelist.html, showlog.html, repairdb.html, doaddftp.html, editmsg...

CVE-2004-1981

Technical details about CVE-2004-1981 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-1883

The CVE-2004-1883 issue affects Ipswitch WS_FTP Server 4.0.2. It describes two buffer-overflow routes: (1) via a large error string generated by the ALLO handler that could let remote authenticated users execute arbitrary code, and (2) via a long hostname or username inserted into a reply to a ST...