8092 matches found
CVE-2004-0999
zgv 5.5.3 allows remote attackers to cause a denial of service application crash via segmentation fault via crafted multiple-image animated GIF images...
CVE-2004-1043
CVE-2004-1043 describes a cross-domain vulnerability in the HTML Help ActiveX control (hhctrl.ocx) used by Internet Explorer. If one hhctrl.ocx instance opens a Related Topics window in one domain and another opens content in a different domain with the same window name, the content can run in th...
Immunity Canvas: CAM
Name| cam ---|--- CVE| CVE-2004-1812 Exploit Pack| CANVAS Description| TNG - cam.exe Notes| CVE Name: CVE-2004-1812 VENDOR: Computer Associates VersionsAffected: run camstat: Version 1.05 Jun 8 2000 13:22 TNSVER.exe reports 2.4 Repeatability: This is a one shot exploit. Patch: Patched by...
CVE-2004-1316
CVE-2004-1316 affects Mozilla 1.7.3 and earlier: a heap-based buffer overflow in MSG_UnEscapeSearchUrl (nsNNTPProtocol.cpp) can be triggered by an NNTP URL containing a trailing backslash, preventing termination of a string and leading to remote denial of service (crash). Affected component: Mozi...
CVE-2004-0567
Summary: CVE-2004-0567 refers to a buffer/_name validation vulnerability in Windows WINS that can allow remote code execution or denial of service via specially crafted WINS packets. Affected products/versions (as stated): Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Ser...
CVE-2004-1315
Summary: CVE-2004-1315 affects phpBB 2.x prior to 2.0.11. The vulnerability stems from improper URL decoding of the highlight parameter in viewtopic.php, allowing a remote attacker to double-encode the highlight value so that PHP exec runs arbitrary code. Exploited in the wild by the Santy.A worm...
CVE-2004-1146
CVE-2004-1146 affects CVSTrac prior to 1.1.5. The vulnerability is due to multiple cross-site scripting flaws in the main.c and login.c components, enabling remote attackers to inject arbitrary HTML and script into the victim’s browser. This aligns with multiple public disclosures and CVE records...
CVE-2004-2369
Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. dot dot in the directory creation command...
CVE-2004-2241
Cross-site scripting XSS vulnerability in Phorum 5.0.11 and earlier allows remote attackers to inject arbitrary HTML or web script via search.php. NOTE: some sources have reported that the affected file is read.php, but this is inconsistent with the vendor's patch...
CVE-2004-1805
Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in class names...
CVE-2004-1869
Etherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause a denial of service crash by sending a packet that specifies the size for the next packet, then sending a larger packet than specified, which causes Etherlords to read unallocated memory...
CVE-2004-1908
McFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain sensitive information via the GetSpecialFolderLocation function with certain parameters...
CVE-2004-2010
PHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the basedir parameter to reference a URL on a remote web server that contains phpshop.cfg...
CVE-2004-2022
ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers to cause a denial of service crash and possibly execute arbitrary code via a long argument to the system command, which leads to a stack-based buffer overflow. NOTE: it is unclea...
CVE-2004-2054
CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via 1 the mode parameter to privmsg.php or 2 the redirect parameter to login.php...
CVE-2004-2107
Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attackers to use the finjan-parameter-type header to 1 restart the service, 2 use the getlastmsg command to view log information, or 3 use the online command to...
CVE-2004-2138
Cross-site scripting XSS vulnerability in AWSguest.php in AllWebScripts MySQLGuest allows remote attackers to inject arbitrary HTML and PHP code via the 1 Name, 2 Email, 3 Homepage or 4 Comments field...
CVE-2004-2182
Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server...
CVE-2004-1763
Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 build 91 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long project name...