8091 matches found
CVE-2004-2034
Buffer overflow in the 1 WTHoster and 2 WebDriver modules in WildTangent Web Driver 4.0 allows remote attackers to execute arbitrary code via a long filename...
CVE-2004-0008
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow...
CVE-2004-0086
Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085...
CVE-2004-0006
Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 cookies in a Yahoo web connection, 2 a long name parameter in the Yahoo login web page, 3 a long value parameter in the...
CVE-2004-0087
The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a different vulnerability than CVE-2004-0088...
CVE-2004-0008
GAIM (0.74 and earlier) and Ultramagnetic prior to 0.81 are affected by CVE-2004-0008 due to a heap-based overflow triggered by a DirectIM packet, allowing remote attackers to cause a denial of service and potentially execute arbitrary code. The issue is network-exploitable with no authentication...
CVE-2004-0085
Technical details about CVE-2004-0085 are not provided in the connected documents; public info here is limited to generic descriptions. Monitor for updates.
CVE-2004-0047
CVE-2004-0047 concerns trr19, a GNU Emacs type trainer. Debian advisories describe a local privilege escalation where trr19’s setgid binaries do not drop privileges before executing a command, allowing a local user to gain access to the local games group. The issue is fixed in Debian DSA-430-1 wi...
CVE-2004-0007
Buffer overflow in the Extract Info Field Function for 1 MSN and 2 YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code...
CVE-2004-2131
Stack-based buffer overflow in ontape for IBM Informix Dynamic Server IDS 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable...
CVE-2004-2122
Cross-site scripting XSS vulnerability in intraforumdb.cgi in Intra Forum allows remote attackers to inject arbitrary web script or HTML via the 1 uselastread or 2 forum parameters...
CVE-2004-2117
Tiny Server 1.1 allows remote attackers to cause a denial of service crash via malformed HTTP requests such as 1 a GET request without the HTTP version HTTP/1.1, or 2 a request without GET or the HTTP version...
CVE-2004-0091
CVE-2004-0091 is an XSS issue in vBulletin’s register.php (unknown versions) exploitable via the reg_site parameter. The vendor disputes the existence of reg_site/reg_site variable in vBulletin 2/3 sources; no concrete exploitation or fix/version details are provided in the connected documents. R...
CVE-2004-0091
NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in register.php for unknown versions of vBulletin allows remote attackers to inject arbitrary HTML or web script via the regsite or possibly regsite parameter. NOTE: the vendor has disputed this issue, saying...
CVE-2004-0074
CVE-2004-0074 : The provided documents state multiple buffer overflows in xsok 1.02 that allow local users to gain privileges via (1) a long LANG environment variable or (2) a long -xsokdir command line argument. This is described as a different vulnerability from CVE-2003-0949. The Debian/OpenVA...
CVE-2004-1759
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service CPU consumption via arbitrary packets to TCP port 14247, as demonstrated using port scanning...
CVE-2004-0032
Cross-site scripting XSS vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary HTML and web script via the firstname parameter...
CVE-2004-0035
SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hideemail parameter...