8091 matches found
CVE-2004-1944
CVE-2004-1944 affects Eudora 6.1 and 6.0.3 for Windows, where processing a deeply nested multipart MIME message can cause a remote denial-of-service (crash). The available sources confirm the affected product and the crash impact, but no patch/version remediation details are provided in the docum...
CVE-2004-1901
Portage (Gentoo) vulnerability CVE-2004-1901: Portage before 2.0.50-r3 allows a local attacker to overwrite arbitrary files via a hard link attack on the lockfiles. This is a local-privilege issue tied to the lockfile handling. Affected software is Portage; the root cause is the hard link attack ...
CVE-2004-1869
CVE-2004-1869 affects Etherlords I (≤1.07) and Etherlords II (≤1.03). The issue arises in network handling: a crafted packet sets the size for the next packet and is followed by a larger packet, causing Etherlords to read unallocated memory and crash (DoS). The provided sources do not specify a r...
CVE-2004-1989
PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEMEDIR parameter to reference a URL on a remote web server that contains userlistinfobox.inc...
CVE-2004-2058
ASPRunner 2.4 allows remote attackers to gain sensitive information via 1 hidden form fields or 2 error messages...
CVE-2004-2038
Cross-site scripting XSS vulnerability in Land Down Under LDU before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in 1 functions.php, 2 header.php or 3 auth.inc.php...
CVE-2004-1904
Technical details about CVE-2004-1904 are not provided in the supplied documents; no publicly accessible specifics (affected product, root cause, or remediation) are present beyond the initial description. Monitor for updates.
CVE-2004-1798
CVE-2004-1798 describes a cross-site scripting vulnerability in RealNetworks RealPlayer/RealOne Player where a SMIL presentation can include a URL with the scripting protocol (e.g., javascript:) that is executed in the security context of the previously loaded URL. The issue arises from RealPlaye...
CVE-2004-2017
CVE-2004-2017 covers multiple XSS vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0. Remote attackers can inject HTML/script via (1) the link parameter to ttt-out, (2) the X-Forwarded-For header to ttt-in, (3) the Referer header to ttt-in, or (4) the site name and (5) site URL fields in the m...
CVE-2004-1855
CVE-2004-1855 affects Dark Age of Camelot prior to 1.68 live patch. The RSA public key is not signed, enabling potential MITM by remote malicious servers to access sensitive information. No explicit fix or patch details are provided in the supplied documents.
CVE-2004-1825
CVE-2004-1825 is a cross-site scripting (XSS) vulnerability in Mambo Open Source’s index.php, specifically in the mos_change_template and return parameters. Multiple connected sources (OpenVAS NASL 16316/136141256231016316, NVD, and CVE records) confirm that vulnerable versions include Mambo Open...
CVE-2004-1867
Technical details are not publicly available in the provided documents; monitor for updates.
CVE-2004-1875
CVE-2004-1875 describes multiple XSS vulnerabilities in cPanel 9.1.0-R85 . The flaws allow remote attackers to inject arbitrary web script/HTML via nine parameters across several pages (testfile.html, erredit.html, dnslook.html, ignorelist.html, showlog.html, repairdb.html, doaddftp.html, editmsg...
CVE-2004-1981
Technical details about CVE-2004-1981 are not publicly available in the provided documents. Monitor for updates.
CVE-2004-1883
The CVE-2004-1883 issue affects Ipswitch WS_FTP Server 4.0.2. It describes two buffer-overflow routes: (1) via a large error string generated by the ALLO handler that could let remote authenticated users execute arbitrary code, and (2) via a long hostname or username inserted into a reply to a ST...
CVE-2004-1992
CVE-2004-1992 affects Serv-U FTP Server prior to 5.0.0.6. The root cause is a buffer overflow caused by incorrect validation of FTP LIST/NLST parameters (specifically a long -l parameter), leading to an out-of-bounds read and remote denial of service. Affected versions include 5.0.0.4 and earlier...
CVE-2004-1822
CVE-2004-1822 affects Phorum 3.1–5.0.3 beta and involves multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via (1) the HTTP_REFERER parameter to login.php, (2) the HTTP_REFERER parameter to register.php, or (3) the target...
CVE-2004-2055
Cross-site scripting XSS vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the searchauthor parameter...
CVE-2004-1918
CVE-2004-1918 affects RSniff 1.0. The vulnerability allows a remote attacker to exhaust a target’s resources by opening a large number of connections with a command other than AUTHENTICATE (or with no data), preventing the socket from closing properly. The available documents confirm the affected...