8091 matches found
CVE-2004-0081
CVE-2004-0081 affects OpenSSL 0.9.6 prior to 0.9.6d. The issue is that OpenSSL does not properly handle unknown TLS/SSL message types, enabling a remote attacker to trigger a denial of service via an infinite loop (demonstrated with the Codenomicon TLS Test Tool). Impact is a network-based DoS; e...
CVE-2004-0323
CVE-2004-0323 affects XMB (XMBForum) 1.8 Final SP2 (and item 3 also observed in XMB 1.9 beta). The vulnerabilities are multiple SQL injection flaws exploitable via parameters in web scripts: ppp (viewthread.php), desc (misc.php), tpp (forumdisplay.php), ascdesc (forumdisplay.php), and addon (stat...
CVE-2004-0255
CVE-2004-0255 affects Xlight FTP Server (example given: v1.52 with log-to-screen enabled). The vulnerability allows remote attackers to cause a denial of service by requesting a long directory consisting of '.' and '/' characters, which crashes the server when an administrator views the log file ...
CVE-2004-0335
CVE-2004-0335 affects LAN SUITE Web Mail 602Pro when the “Directory browsing” feature is enabled. A remote attacker can obtain a directory listing by requesting (1) index.html, (2) cgi-bin/, or (3) users/ via HTTP. The vulnerability allows partial confidentiality impact with network access and lo...
CVE-2004-0247
The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service crash via exception via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory...
CVE-2004-0314
Cross-site scripting XSS vulnerability in done.jsp in WebzEdit 1.9 and earlier allows remote attackers to execute arbitrary script as other users via the message parameter...
CVE-2004-0325
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service CPU consumption via "//../" arguments to 1 mkd, 2 xmkd, 3 dele, 4 size, 5 retr, 6 stor, 7 appe, 8 rnfr, 9 rnto, 10 rmd, or 11 xrmd, as demonstrated using "//../qwerty"...
CVE-2004-0326
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request...
CVE-2004-0269
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via 1 the category variable in the Search module or 2 the admin variable in the WebLinks module...
CVE-2004-0252
TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service CPU consumption via an empty USER name...
CVE-2004-0355
CVE-2004-0355 affects Invision Power Board 1.3 Final. A remote attacker can select a non-image file for the "Personal Photo" field, causing an error message that reveals the installation path (partial information disclosure). The NVD/NVD-derived data indicate a base score of 5.0 (Medium), network...
CVE-2004-0317
CVE-2004-0317 affects Load Sharing Facility (LSF) versions 4.x, 5.x, and 6.x. The vulnerability is a buffer overflow in the eauth component triggered by a long LSF_From_PC parameter, allowing local users or attackers within an LSF cluster to cause a denial of service (segmentation fault) and pote...
CVE-2004-0277
CVE-2004-0277 is a format-string vulnerability in Dream FTP 1.02 where the username is unsafely processed, allowing a remote attacker to crash the server and potentially execute arbitrary code. The NVD entry assigns a base score of 10.0 ( HIGH ) with network attack vector and complete impact. A c...
CVE-2004-0282
CVE-2004-0282 affects Crob FTP daemon 3.5.2. The vulnerability allows remote attackers to cause a denial of service (crash) by repeatedly connecting to and disconnecting from the server. Public details consistently state a crash condition as the impact; no exploit specifics or vectors are provide...
CVE-2004-0286
Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long username...
CVE-2004-0275
SQL injection vulnerability in calendardownload.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter...
CVE-2004-0254
Cross-site scripting XSS vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary script as other users via an img tag...
CVE-2004-0250
The CVE-2004-0250 issue is a SQL injection in PhotoPost PHP Pro 4.6 and earlier. The vulnerability allows remote attackers to gain privileges via user-controlled inputs in showproduct.php (product parameter) or showcat.php (cat parameter). The describes affected component is the PHP-based PhotoPo...
CVE-2004-0316
The CVE-2004-0316 issue affects Avirt Soho 4.3. It is a buffer overflow vulnerability that allows remote attackers to trigger a denial of service (crash) by sending a large GET request to port 1080 or a large GET request consisting of % characters to port 8080. The provided sources confirm the af...