8092 matches found
CVE-2004-2444
Cross-site scripting XSS vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the action parameter...
CVE-2004-2449
Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial of service application crash via a long, malformed UDP datagram...
CVE-2004-2459
Unknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords, related to the password table...
CVE-2004-2463
Buffer overflow in ADA Image Server ImgSvr 0.4 allows remote attackers to cause a denial of service web server crash or execute arbitrary code via a long GET request...
CVE-2004-2472
Agnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service CPU consumption via a flood of small, invalid packets, which can not be processed quickly enough by Outpost Pro...
CVE-2004-2477
DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table SDT in \device\physicalmemory with the original SDT found in ntoskrnl.exe...
CVE-2004-2494
Cross-site scripting XSS vulnerability in error in Ability Mail Server 1.18 allows remote attackers to inject arbitrary web script or HTML via the erromsg parameter...
CVE-2004-2524
clogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and earlier allows remote attackers to obtain plaintext username and password credentials by using the clogine and base64encode functions to encode the desired user ID in the c parameter, then read the plaintext values in the resulting form...
CVE-2004-1182
hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted 1 username or 2 hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password...
CVE-2004-2109
Multiple cross-site scripting XSS vulnerabilities in 1 imagezoom.asp or 2 recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL...
CVE-2004-1564
CRLF injection vulnerability in subscribethread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter...
CVE-2004-2373
The Buddy icon file for AOL Instant Messenger AIM 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations...
CVE-2004-2256
Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang language variable...
CVE-2004-2054
CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via 1 the mode parameter to privmsg.php or 2 the redirect parameter to login.php...
CVE-2004-2693
HP-UX B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed uses insecure directory permissions, which allows local users to gain privileges via files in /opt/gnome/src/GLib/...
CVE-2004-2745
Directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in a URL...
CVE-2004-1316
Heap-based buffer overflow in MSGUnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service application crash via an NNTP URL news: with a trailing '' backslash character, which prevents a string from being NULL terminated...
CVE-2004-2151
Chatman 1.1.1 RC1 and earlier allows remote attackers to cause a denial of service memory consumption or application crash via a very large data size...
CVE-2004-1296
CVE-2004-1296 affects groff (GNU troff) 1.18.1 where the scripts eqn2graph and pic2graph may overwrite arbitrary files via a symlink attack on temporary files. The vulnerability arises from insecure handling of temporary files, enabling local users to modify files with partial integrity impact. N...