CVE-2004-0007

Buffer overflow in the Extract Info Field Function for 1 MSN and 2 YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2004-0047

CVE-2004-0047 concerns trr19, a GNU Emacs type trainer. Debian advisories describe a local privilege escalation where trr19’s setgid binaries do not drop privileges before executing a command, allowing a local user to gain access to the local games group. The issue is fixed in Debian DSA-430-1 wi...

CVE-2004-2131

Stack-based buffer overflow in ontape for IBM Informix Dynamic Server IDS 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable...

CVE-2004-2122

Cross-site scripting XSS vulnerability in intraforumdb.cgi in Intra Forum allows remote attackers to inject arbitrary web script or HTML via the 1 uselastread or 2 forum parameters...

CVE-2004-2117

Tiny Server 1.1 allows remote attackers to cause a denial of service crash via malformed HTTP requests such as 1 a GET request without the HTTP version HTTP/1.1, or 2 a request without GET or the HTTP version...

CVE-2004-0091

CVE-2004-0091 is an XSS issue in vBulletin’s register.php (unknown versions) exploitable via the reg_site parameter. The vendor disputes the existence of reg_site/reg_site variable in vBulletin 2/3 sources; no concrete exploitation or fix/version details are provided in the connected documents. R...

CVE-2004-0074

CVE-2004-0074 : The provided documents state multiple buffer overflows in xsok 1.02 that allow local users to gain privileges via (1) a long LANG environment variable or (2) a long -xsokdir command line argument. This is described as a different vulnerability from CVE-2003-0949. The Debian/OpenVA...

CVE-2004-0091

NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in register.php for unknown versions of vBulletin allows remote attackers to inject arbitrary HTML or web script via the regsite or possibly regsite parameter. NOTE: the vendor has disputed this issue, saying...

CVE-2004-1759

Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service CPU consumption via arbitrary packets to TCP port 14247, as demonstrated using port scanning...

CVE-2004-0032

Cross-site scripting XSS vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary HTML and web script via the firstname parameter...

CVE-2004-0030

PHP remote file inclusion vulnerability in 1 functions.php, 2 authenticationindex.php, and 3 configgedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGVBASEDIRECTORY parameter to reference a URL on a remote web server that contains the code...

CVE-2004-0031

PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php...

CVE-2004-0035

SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hideemail parameter...

CVE-2004-2127

Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the file variable...

CVE-2004-0014

Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings...

CVE-2004-0034

Multiple cross-site scripting XSS vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitrary HTML or web script via 1 the phorumcheckxss function in common.php, 2 the EditError variable in profile.php, and 3 the Error variable in login.php...

CVE-2004-0066

phpGedView is affected by CVE-2004-0066 up to version 2.64. The vulnerability allows remote attackers to disclose the web server’s absolute path via malformed parameters to multiple PHP pages (indilist.php, famlist.php, placelist.php, imageview.php, timeline.php, clippings.php, login.php, gdbi.ph...

CVE-2004-0065

The CVE-2004-0065 entry refers to multiple SQL injection vulnerabilities in phpGedView prior to 2.65, allowing remote attackers to execute arbitrary SQL via timeline.php and placelist.php. Affected software: phpGedView (versions before 2.65). Root cause: SQL injection in two scripts (timeline.php...

CVE-2004-0056

Multiple vulnerabilities in the H.323 protocol implementation affect Nortel Networks BCM, Succession 1000 IP Trunk/IP Peer Networking, and 802.11 Wireless IP Gateway. The issues enable remote denial of service and possibly arbitrary code execution, demonstrated via the H.225 protocol test suite (...

CVE-2004-0072

CVE-2004-0072 affects Accipiter Direct Server 6.0. It is a directory-traversal vulnerability allowing remote attackers to read arbitrary files via encoded .. (backslash ..) sequences in an HTTP request. The NVD entry assigns a CVSSv2 base score of 5.0 (Medium) with Network attack vector and no au...