CVE-2004-0728

The Remote Control Client service in Microsoft's Systems Management Server SMS 2.50.2726.0 allows remote attackers to cause a denial of service crash via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address...

CVE-2004-0731

Cross-site scripting XSS vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary script as other users via the input field...

CVE-2004-2061

RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a 1 http://, 2 ftp://, or 3 file:// URL...

CVE-2004-0716

CVE-2004-0716 is a buffer overflow in HP’s DCE endpoint mapper (epmap) within the DCED daemon on HP-UX 11, allowing remote code execution via a small fragment length and large stub data. Patches exist: HP-UX patches B.11.00 PHSS_29963, B.11.11 PHSS_29964, B.11.23 PHSS_29966; HP Tru64 and HP OpenV...

DEBIAN-CVE-2004-0600

Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...

RHEL 2.1 : samba (RHSA-2004:404)

Updated samba packages that fix a buffer overflow issue are now available. Samba provides file and printer sharing services to SMB/CIFS clients. The Samba team discovered a buffer overflow in the code used to support the 'mangling method = hash' smb.conf option. The Common Vulnerabilities and...

CVE-2004-0721

Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability...

CVE-2004-0731

Cross-site scripting XSS vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary script as other users via the input field...

CVE-2004-0737

Multiple cross-site scripting vulnerabilities in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary web script or HTML via the 1 sid, 2 max, 3 sel1, 4 sel2, 5 sel3, 6 sel4, 7 sel5, 8 match, 9 mod1, 10 mod2, or 11 mod3 parameters...

CVE-2004-0736

CVE-2004-0736 affects Php-Nuke’s search module. The issue lets remote attackers glean sensitive information by using the (1) "**" and (2) "+" search patterns, which reveal the application path in error messages. The available documents do not specify affected Php-Nuke versions or a concrete patch...

CVE-2004-0726

The CVE-2004-0726 entry concerns the Windows Media Player control in Microsoft Windows 2000. Affected component: Windows Media Player control. Vulnerability: remote attackers can cause JavaScript in an ASX filename to be executed within the local computer zone, specifically in a preview panel, le...

CVE-2004-0724

The CVE-2004-0724 entry concerns the Half-Life engine (pre-July 7, 2004). The vulnerability allows remote attackers to cause a denial of service (server or client crash) by sending an empty fragmented packet over the network. The NVD entry quotes a CVSSv2 base score of 5.0 (Medium) with network a...

CVE-2004-2047

Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbitrary files via a .. dot dot in the pathext parameter...

CVE-2004-0723

CVE-2004-0723 affects the Microsoft Java VM 5.0.0.3810. The issue allows a remote attacker to bypass sandbox restrictions and read/write data between applets from different domains via the GET/Key and PUT/Key/Value commands (cross-site Java). The provided documents identify the vulnerable compone...

CVE-2004-0724

The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service server or client crash via an empty fragmented packet...

CVE-2004-0738

The CVE-2004-0738 entry documents multiple SQL injection vulnerabilities in the Php-Nuke Search module, exploitable via the min or categ parameters to allow remote arbitrary SQL execution. Affected software: Php-Nuke (Search module). Root cause: input unsafely concatenated into SQL queries (as de...

CVE-2004-0718

The 1 Mozilla 1.6, 2 Firebird 0.7, 3 Firefox 0.8, and 4 Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability...

CVE-2004-0738

Multiple SQL injection vulnerabilities in the Search module in Php-Nuke allow remote attackers to execute arbitrary SQL via the 1 min or 2 categ parameters...

CVE-2004-0727

Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as...

CVE-2004-0721

CVE-2004-0721 affects Konqueror 3.1.3, 3.2.2 (and possibly other versions) where a frame in one domain can inject content into a frame in another domain, enabling web site spoofing and related attacks. The vulnerability stems from insufficient cross-domain frame isolation, as described in KDE/SUS...