CVE-2004-2085

Multiple cross-site scripting XSS vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including 1 the sid parameter to comments.php, 2 the cid, cf, or rfd parameters to category.php, or the cid paramet...

CVE-2004-0130

phpGedView 2.65 and earlier is affected by CVE-2004-0130 where a login.php request that omits the required username or password parameters leaks sensitive information via an error message. The vulnerability enables information disclosure and is triggered by improper handling of missing credential...

CVE-2004-0130

login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, which causes the information to be leaked in an error message...

ReviewPost PHP Pro Multiple Script SQL Injections

ReviewPost PHP Pro, a web-based software that manages user's opinions, is installed on the remote web server. The installed version fails to sanitize user input to the 'product' parameter of the 'showproduct.php' script and the 'cat' parameter of the 'showcat.php' script before using it in a...

CVE-2004-0003

Technical details for CVE-2004-0003 are not publicly available in the provided documents. No concrete description of affected component, root cause, or remediation is present; monitor for updates from the sources.

CVE-2004-0028

jitterbug 1.6.2 does not properly sanitize inputs, which allows remote authenticated users to execute arbitrary commands...

CVE-2004-0044

Cisco Personal Assistant 1.41 and 1.42 disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username...

CVE-2004-0005

Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 octal encoding in yahoodecode that causes a null byte to be written beyond the buffer, 2 octal encoding in yahoodecode that causes a pointer to reference memory...

CVE-2004-0002

CVE-2004-0002 describes a denial-of-service risk in the TCP MSS handling in netinet. Remote attackers can exhaust resources by (1) setting a very small MTU, generating many small packets, or (2) sending numerous packets with tiny payloads that trigger many calls to sowakeup. The available connect...

CVE-2004-0002

The TCP MSS maximum segment size functionality in netinet allows remote attackers to cause a denial of service resource exhaustion via 1 a low MTU, which causes a large number of small packets to be produced, or 2 via a large number of packets with a small TCP payload, which cause a large number ...

CVE-2004-1082

moddigestapple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials...

CVE-2004-0015

vbox3 0.1.8 and earlier does not properly drop privileges before executing a user-provided TCL script, which allows local users to gain privileges...

CVE-2004-0016

The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files...

Serv-U SITE CHMOD Command Multiple Vulnerabilities

The remote host is running Serv-U FTP Server. There is a bug in the way the server handles arguments to the SITE CHMOD requests that could allow an attacker to trigger a buffer overflow or corrupt memory in the server and disable it remotely or to potentially execute arbitrary code on the host...

CVE-2004-0007

CVE-2004-0007 affects instant messaging clients Gaim (GAIM) up to version 0.74 and Ultramagnetic before 0.81. The vulnerability is a buffer overflow in the Extract Info Field Function used by MSN and YMSG protocol handlers, allowing remote attackers to cause a denial of service and potentially ex...

CVE-2004-0088

The System Configuration subsystem in Mac OS 10.2.8 allows local users to modify network settings, a different vulnerability than CVE-2004-0087...

CVE-2004-0088

CVE-2004-0088 affects Mac OS X (System Configuration subsystem) on 10.2.8, where local users can modify network settings. The description states this is a local-privilege/user-configuration issue distinct from CVE-2004-0087. The connected documents do not provide concrete exploit details, affecte...

CVE-2004-0006

CVE-2004-0006 affects the IM client components in GAIM (aka Pidgin) 0.75 and earlier and Ultramagnetic before 0.81 . The vulnerability set consists of multiple buffer overflows in the Yahoo-related handling paths: (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login...

CVE-2004-0086

Technical details for CVE-2004-0086 are not publicly provided in the supplied documents. No explicit affected versions, root cause, or impact are stated. Monitor official advisories for updates.

CVE-2004-0092

Technical details for CVE-2004-0092 are not publicly provided in the connected documents; the records only mention an unknown Safari vulnerability on macOS 10.2.8/10.3.2. Monitor for updates.