8092 matches found
CVE-2004-1725
The CVE-2004-1725 entry describes a stack-based buffer overflow in xvbmp.c within XV that allows remote attackers to execute arbitrary code via a crafted image file. Connected sources confirm the affected component is XV and specify xvbmp.c as the vulnerable module, with the vulnerability enablin...
CVE-2004-1719
Merak Webmail Server 5.2.7 (and Merak Webmail/IceWarp Web Mail
CVE-2004-1738
CVE-2004-1738 is a documented XSS vulnerability in JShop, affecting the page.php component via the xPage parameter. The available sources (NVD, CVE list) confirm that remote attackers can inject arbitrary script/HTML. The provided materials do not specify affected versions, fixed/remediation deta...
CVE-2004-1743
CVE-2004-1743 affects Easy File Sharing (EFS) Webserver 1.25. The vulnerability allows remote attackers to view arbitrary files by sending an HTTP request targeting the disk_c virtual folder. The root cause is improper access handling in the web server’s disk_c folder, resulting in exposure of fi...
CVE-2004-1744
Easy File Sharing EFS Webserver 1.25 allows remote attackers to cause a denial of service CPU consumption or crash via many large HTTP requests...
CVE-2004-1732
SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter...
CVE-2004-1751
Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service client or server crash via a large packet, which generates a "Message too long" socket error that is treated as a critical error...
CVE-2004-1731
CVE-2004-1731 affects the Mantis bugtracker, specifically signup_page.php, where remote attackers could create multiple users and provide the same e-mail address to trigger mass e-mail behavior. The vulnerability enables sending e-mail bombs; exploitation details (methods, likelihood, and in-the-...
CVE-2004-1749
The CVE-2004-1749 vulnerability affects Attack Mitigator IPS 5500 version 3.11.008 (and possibly other versions) when configured in a one-armed routing setup. It allows remote attackers to cause a denial-of-service by generating a large number of HTTP requests, leading to CPU consumption. The NVD...
CVE-2004-1721
The 1 function.php or 2 function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000...
CVE-2004-1709
CVE-2004-1709 concerns the Datakey Rainbow iKey2032 USB token when used with the CIP client package. The vulnerability is that communications between the token and the driver are not encrypted, which could allow local users to obtain the PINs of other users. The referenced records assign a low im...
CVE-2004-1717
CVE-2004-1717 describes multiple buffer overflows in the ps.c file’s psscan function within the gv (ghostview) project. A remote attacker could cause arbitrary code execution by supplying a Postscript file with an excessively long value for one of several fields (BoundingBox, comment, Orientation...
CVE-2004-1752
Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email with a long Content-Type header...
CVE-2004-1705
CVE-2004-1705 affects Citadel/UX 6.23 and earlier, where a buffer overflow in the remote USER command can be triggered by a crafted username. This vulnerability can cause a denial of service and, per Nessus/related sources, could allow arbitrary code execution on affected servers. The issue origi...
CVE-2004-1715
CVE-2004-1715 describes a directory traversal vulnerability in MIMEsweeper for Web (pre-5.0.4). The flaw allows reading arbitrary files via dot-dot sequences like "..\" or ".." in the URL, potentially impacting remote attackers or local users. The connected documents confirm the affected product ...
CVE-2004-1723
The CVE-2004-1723 issue affects PHP-Fusion 4.00, specifically the updateuser.php and forums_prune.php scripts. A remote attacker can trigger a direct HTTP request that reveals the installation path in an error message, leading to sensitive information disclosure. The provided sources confirm the ...
CVE-2004-1704
WpQuiz versions 2.60b1–2.60b8 are affected by a privilege-escalation vulnerability exploitable via a direct request to adminrestore.php in the extras directory. The issue is described as allowing remote attackers to gain privileges. Exploit details, affected platforms beyond the product/version r...
CVE-2004-1730
CVE-2004-1730 is an XSS vulnerability in the Mantis bugtracker. The issue allows remote attackers to inject arbitrary script/HTML via four vectors: (1) the return parameter to login_page.php, (2) the e-mail field in signup.php, (3) the action parameter to login_select_proj_page.php, and (4) the h...
CVE-2004-1737
Summary of CVE-2004-1737 (Cacti) : A SQL injection vulnerability exists in auth_login.php of Cacti 0.8.5a that allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username or password parameters. Multiple connected sources document this, including NVD, Debi...
