CVE-2004-0294

YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid users and conduct a brute force password guessing attack...

CVE-2004-0357

Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via 1 user.dll, 2 loadpageadmin.dll or 3 loadpageuser.dll...

CVE-2004-0259

The CVE affects Formmail.php version 5.0 and earlier, where check_referer() can be bypassed by an empty or spoofed HTTP Referer, enabling access restriction bypass. The vulnerability is demonstrated via an application on the same web server that contains an associated cross-site scripting (XSS) i...

CVE-2004-0278

Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service CPU consumption via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data...

CVE-2004-0242

X-Cart 3.4.3 is affected by CVE-2004-0242. An attacker can remotely read sensitive information by supplying a mode parameter that triggers phpinfo or perlinfo commands. The vulnerability enables information disclosure in the affected product via the web interface; no exploitation or mitigations a...

CVE-2004-1830

error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid 1 language, 2 newlang, or 3 lang parameter, which leaks the pathname in a PHP error message...

CVE-2004-0312

CVE-2004-0312 affects Linksys WAP55AG (firmware 1.07) where an SNMP read-only community can be exploited to gain access to read/write community strings by querying OID 1.3.6.1.4.1.3955.2.1.13.1.2. This reveals a flaw in SNMP information exposure that allows escalation from read to write access. T...

CVE-2004-0079

The dochangecipherspec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake that triggers a null dereference...

CVE-2004-0295

CVE-2004-0295 affects Broker FTP 6.1.0.0, where the TsFtpSrv.exe service accepts an open idle connection that can be abused by remote attackers to cause CPU consumption and a denial of service. The available records describe the vulnerable component and the impact (DoS via idle connection), but d...

CVE-2004-0296

CVE-2004-0296 affects TsFtpSrv.exe in Broker FTP 6.1.0.0. The vulnerability arises when an attacker opens and immediately closes a connection, causing TsFtpSrv.exe to exit with an exception. This is a network-based issue with low attack complexity and no authentication required, leading to partia...

CVE-2004-0333

CVE-2004-0333 describes a buffer overflow in the UUDeview component used by WinZip 6.2–8.1 SR-1 (and possibly other packages). The overflow can be triggered by decoding a MIME archive with long MIME parameters, allowing remote code execution. Multiple sources corroborate the same core issue acros...

CVE-2004-0265

This CVE concerns a Cross-site Scripting (XSS) vulnerability in Php-Nuke 6.x-7.1.0, specifically in modules.php. The vulnerability allows remote attackers to execute arbitrary script as other users by manipulating URL-encoded parameters (1) title or (2) fname in the News or Reviews modules. Affec...

CVE-2004-0333

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...

CVE-2004-0361

The CVE-2004-0361 case concerns the Safari Javascript engine (Safari 1.2 and earlier). The vulnerability arises when code creates a new Array object with a large size value and then writes into that array, enabling a remote attacker to trigger a denial-of-service (segmentation fault). The availab...

CVE-2004-0292

Summary: CVE-2004-0292 concerns Sami HTTP Server (KarjaSoft) 1.0.4. The vulnerability is a buffer overflow triggered by a long HTTP GET request, allowing remote attackers to cause a crash (DoS) and potentially execute arbitrary code. The OpenVAS entries also reference Sami HTTP Server v1.0.4 or o...

CVE-2004-0288

CVE-2004-0288 affects mnoGoSearch versions 3.2.13–3.2.15, where a buffer overflow in UdmDocToTextBuf could allow a remote attacker to execute arbitrary code by indexing a large document. The OpenVAS/OpenBSD/NVD entries confirm the vulnerability and impact, but no patch/version fix is specified in...

CVE-2004-0315

The CVE-2004-0315 entry concerns a buffer overflow in Avirt Voice 4.0 . A remote attacker can trigger a vulnerability by sending a long GET request on port 1080 , potentially causing a denial of service and, per the NVD entry, possibly execute arbitrary code . The issue is a network-facing vulner...

CVE-2004-0352

The vulnerability CVE-2004-0352 affects Cisco 11000 Series Content Services Switches running WebNS. Specifically, WebNS 5.0(x) before 05.0(04.07)S and 6.10(x) before 06.10(02.05)S are susceptible. A remote attacker can trigger a denial of service (device reset) by sending a malformed UDP packet t...

CVE-2004-0251

Cross-site scripting XSS vulnerability in rxgoogle.cgi allows remote attackers to execute arbitrary script as other users via the query parameter...

CVE-2004-0287

Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service crash via a RETR command with a long argument containing a large number of / slash characters, possibly triggering a buffer overflow...