CVE-2004-1872

Cross-site scripting XSS vulnerability in WebCT Campus Edition 4.1.1.5 allows remote attackers to inject arbitrary web script or HTML via the @import URL function in a CSS style tag...

CVE-2004-0126

The jailattach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail...

CVE-2004-1871

Multiple cross-site scripting XSS vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ppuser, 2 password, 3 stype, 4 perpage, 5 sort, 6 page, 7 si, or 8 cat parameters to showmembers.php, or the 9 photo name, 10 photo...

BELL-CVE-2004-0113 CVE-2004-0113 does not affect BellSoft software

Bulletin has no description...

CVE-2004-0113

Memory leak in sslengineio.c for modssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service memory consumption via plain HTTP requests to the SSL port of an SSL-enabled server...

CVE-2004-0152

Multiple stack-based buffer overflows in 1 the encodemime function, 2 the encodeuuencode function, 3 or the decodeuuencode function for emil 2.1.0 and earlier allow remote attackers to execute arbitrary code via e-mail messages containing attachments with filenames...

CVE-2004-0153

Summary (CVE-2004-0153): Multiple format string vulnerabilities affect Emil up to version 2.1.0 and earlier. The flaws reside in error-message handling and can allow an attacker to execute arbitrary code on a vulnerable host when processing crafted messages. Public documentation across sources (N...

CVE-2004-0372

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the 1 xine-bugreport or 2 xine-check scripts...

CVE-2004-0372

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the 1 xine-bugreport or 2 xine-check scripts...

CVE-2004-0152

The CVE-2004-0152 issue affects Emil (mail filter) with multiple stack-based buffer overflows in encode_mime, encode_uuencode, and decode_uuencode functions for Emil 2.1.0 and earlier. Attackers can send email attachments with filenames that trigger arbitrary code execution. Public references inc...

CVE-2004-0372

CVE-2004-0372 affects xine and related components (xine-bugreport, xine-check) where a local user can cause overwriting of arbitrary files via a symlink attack on the bug report email generated by those scripts. The vulnerability arises from insecure handling of temporary/bug report files, enabli...

[waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions]

================================================================================ waraxe-2004-SA013 ================================================================================ Critical sql injection bug in PhpBB 2.0.8 and in older versions...

CVE-2004-1866

nstxd in Nstx 1.1 beta3 and earlier allows remote attackers to cause a denial of service crash via a large packet, which triggers a null dereference...

CVE-2004-1864

SQL injection vulnerability in Extreme Messageboard XMB 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to 1 member.php, 2 misc.php, or 3 today.php...

CVE-2004-1865

Cross-site scripting XSS vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name $blogname. NOTE: if administrators are normally allowed to add HTML by other means, e.g. through...

CVE-2004-0149

CVE-2004-0149 affects the game xboing prior to version 2.4. Multiple buffer overflows enable a local attacker to gain privileges (reported as able to drop a shell with gid 'games' due to improper bounds checking and unsafe environment-variable use in highscore.c). The issue is confirmed across mu...

CVE-2004-0174

Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service blocked new connections via a "short-lived connection on a rarely-accessed listening socket."...

CVE-2004-0367

Technical details about CVE-2004-0367 are not publicly provided in the connected documents. Monitor for updates in the supplied sources.

CVE-2004-0220

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Tes...

CVE-2004-0219

OpenBSD isakmpd vulnerability CVE-2004-0219 stems from flaws in ISAKMP packet handling, where malformed IPSEC SA payloads can trigger out-of-bounds reads and crash the daemon, causing remote denial of service. Affected: OpenBSD 3.4 and earlier (and related OpenBSD patches for -current/-stable). E...