8091 matches found
CVE-2004-0226
Multiple buffer overflows in Midnight Commander mc before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code...
CVE-2004-0778
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...
CVE-2004-0226
Multiple buffer overflows in Midnight Commander mc before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code...
CVE-2004-0593
CVE-2004-0593 concerns Sygate Enforcer 3.5MR1 and earlier, where the appliance passes broadcast traffic before authentication, enabling remote attackers to bypass filtering rules. The issue affects the Enforcer’s capability to enforce policy prior to authentication, potentially exposing protected...
CVE-2004-0516
Unknown vulnerability in Mac OS X 10.3.4, related to "package installation scripts," a different vulnerability than CVE-2004-0517...
CVE-2004-0419
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions...
CVE-2004-0175
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992...
CVE-2004-0234
Multiple stack-based buffer overflows in the getheader function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testi...
CVE-2004-0433
Multiple buffer overflows in the Real-Time Streaming Protocol RTSP client for 1 MPlayer before 1.0pre4 and 2 xine lib xine-lib before 1-rc4, when playing Real RTSP realrtsp streams, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long URLs, b lo...
CVE-2004-0487
A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service resource consumption and possibly execute arbitrary programs...
CVE-2004-0504
Ethereal 0.10.3 allows remote attackers to cause a denial of service crash via certain SIP messages between Hotsip servers and clients...
CVE-2004-0517
Unknown vulnerability in Mac OS X 10.3.4, related to "handling of process IDs during package installation," a different vulnerability than CVE-2004-0516...
CVE-2004-0229
The framebuffer driver in Linux kernel 2.6.x does not properly use the fbcopycmap function, with unknown impact...
CVE-2004-0519
Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php...
CVE-2004-0760
Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character %00 in an FTP URI...
CVE-2004-0761
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted...
CVE-2004-0763
Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method...
CVE-2004-0764
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language XUL files...
CVE-2004-0163
Sygate Secure Enterprise (SSE) 3.5MR3 and earlier are affected by a replay-based DoS vulnerability. The issue stems from using a static encryption key for HTTP exchanges between SSE servers and SSA clients and the absence of replay protection, allowing an attacker to capture a valid session and r...