CVE-2004-1189

The addtohistory function in svrprincipal.c in libkadm5srv for MIT Kerberos 5 krb5 up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow...

CVE-2004-2541

Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long include line that is later browsed by the target...

CVE-2004-1189

The addtohistory function in svrprincipal.c in libkadm5srv for MIT Kerberos 5 krb5 up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow...

Immunity Canvas: ICECAST

Name| icecast ---|--- CVE| CVE-2004-1561 Exploit Pack| CANVAS Description| ICECAST exploit Notes| CVSS: 7.5 Date public: September of 2004 VENDOR: Icecast.org CVE Url: https://vulners.com/cve/CVE-2004-1561 CVE Name: CVE-2004-1561...

CVE-2004-1142

Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service CPU consumption via a certain malformed SMB packet...

CVE-2004-2479

Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages...

CVE-2004-2632

phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain unauthorized access to MySQL servers via modified $cfg'Servers' variables...

CVE-2004-1558

Multiple stack-based buffer overflows in YPOPs! aka YahooPOPS 0.4 through 0.6 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 POP3 USER command or 2 SMTP request...

CVE-2004-1573

The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator...

CVE-2004-1593

Cross-site scripting XSS vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via the utf parameter...

CVE-2004-1738

Cross-site scripting XSS vulnerability in page.php in JShop allows remote attackers to inject arbitrary web script or HTML via the xPage parameter...

CVE-2004-1779

Cross-site scripting XSS vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the lastvisited parameter...

CVE-2004-1783

Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. slash dot dot...

CVE-2004-1792

swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service infinite loop via a long packet with two CRLF sequences to the service management port TCP 8000...

CVE-2004-1813

VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a trailing slash /...

CVE-2004-1879

Cross-site scripting XSS vulnerability in PHPKIT 1.6.03 allows allows remote attackers to inject arbitrary web script or HTML via forum messages...

CVE-2004-1888

display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable...

CVE-2004-1434

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.10 to 4.12, 4.5x, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via malformed SNMP packets...

CVE-2004-1436

The Transaction Language 1 TL1 login interface in Cisco ONS 15327 4.60 and 4.61 and 15454 and 15454 SDH 4.60 and 4.61, when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters...

CVE-2004-1438

The modauthzsvn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command...