CVE-2004-2290

Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing folder that references an executable file within the folder, which is automatically executed when a user accesses the folder...

CVE-2004-2729

Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute arbitrary code by changing the program for handling incoming connections...

CVE-2004-2230

Heap-based buffer overflow in isakmpd on OpenBSD 3.4 through 3.6 allows local users to cause a denial of service panic and corrupt memory via IPSEC credentials on a socket...

DEBIAN-CVE-2004-2409

Buffer overflow in the shhashcompdata function for Samhain 1.8.9 through 2.0.1, when running in update mode "-t update", might allow attackers to execute arbitrary code...

CVE-2004-2576

class.vfsdav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for access to users' home-directory files, which allows remote attackers to obtain sensitive information from these files...

Immunity Canvas: MDAEMON

Name| mdaemon ---|--- CVE| CVE-2004-2292 Exploit Pack| CANVAS Description| mdaemon imap Notes| CVSS: 5.0 Date public: 05/17/2004 VENDOR: Alt-N CVE Url: https://vulners.com/cve/CVE-2004-2292 CVE Name: CVE-2004-2292...

CVE-2004-0567

The Windows Internet Naming Service WINS in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a...

CVE-2004-2404

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-2347. Reason: This candidate is a duplicate of CVE-2004-2347. Notes: All CVE users should reference CVE-2004-2347 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2004-1145

CVE-2004-1145 affects Konqueror/KDE up to version 3.3.1 where the Java sandbox could be bypassed by JavaScript or Java applets, allowing read/write of arbitrary files. The issue resides in the sandbox restrictions for Java in Konqueror and the FTP kioslave handling in KDE, enabling remote code ex...

CVE-2004-1317

Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command...

CVE-2004-2680

modpython libapache2-mod-python 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to return portions of previously freed memory...

CVE-2004-1141

CVE-2004-1141 affects Ethereal (Wireshark) HTTP dissector versions 0.10.1–0.10.7. Remote attacker could crash the application by sending crafted packets that trigger a use-after-free in the dissector. No details on affected platforms or fixes are provided in the documents; remediation status is n...

CVE-2004-1017

Technical details (affected product/version, root cause, impact, remediation) are not publicly provided in the supplied documents. The CVE entry lacks concrete information here; monitor for updates.

CVE-2004-2655

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...

CVE-2004-2547

NetWin 1 SurgeMail before 2.0c and 2 WebMail allow remote attackers to obtain sensitive information via HTTP requests that a specify the / URI, b specify the /scripts/ URI, or c specify a non-existent file, which reveal the path in an error message...

CVE-2004-0465

Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCPUSER parameter...

CVE-2004-1139

CVE-2004-1139 corresponds to an unknown vulnerability in Ethereal’s DICOM dissector that affects version 0.10.4 through 0.10.7 and can be exploited remotely to crash the application, causing a denial of service. The connected advisories reference multiple vendor/security pages (Red Hat, Gentoo GL...

CVE-2004-1559

Multiple cross-site scripting XSS vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 redirectto, text, popupurl, or popuptitle parameters to wp-login.php, 2 redirecturl parameter to admin-header.php, 3 popuptitle, popupurl, content, or posttit...

Immunity Canvas: NSS

Name| nss ---|--- CVE| CVE-2004-0826 Exploit Pack| CANVAS Description| NSS overflow Notes| CVE Name: CVE-2004-0826 VENDOR: Mozilla References: http://www.osvdb.org/displayvuln.php?osvdbid=9116 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0826 Date public: 23 of August, 2004...

CVE-2004-1775

Cisco VACM View-based Access Control MIB for Catalyst Operating Software CatOS 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write community string...