5681 matches found
CVE-2004-2208
CRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to conduct HTTP response splitting attacks via unknown vectors...
CVE-2004-2207
Cross-site scripting XSS vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2004-2251
The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it easier for remote attackers to construct specialized attacks...
CVE-2004-2293
Multiple cross-site scripting XSS vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 eid parameter or 2 query parameter to the Encyclopedia module, 3 previewreview function in the Reviews module as demonstrated by the url, cover,...
CVE-2004-2332
Multiple cross-site scripting XSS vulnerabilities in CPAN WWW::Form before 1.13 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2004-2457
Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service crash via a large amount of UDP traffic...
CVE-2004-2733
Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to 1 block arbitrary IP addresses via popupipblocking.asp or 2 modify topics via popuptopicadmin.asp...
CVE-2004-1186
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service application crash...
Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration
Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could...
PHP 45 - addslashes() Null Byte Bypass
PHP 45 - addslashes Null Byte Bypass source: https://www.securityfocus.com/bid/11981/info PHP4 and PHP5 are reported prone to multiple remotely exploitable vulnerabilities. These issue result from insufficient sanitization of user-supplied data. A remote attacker may carry out directory traversal...
WordPress Core 1.2.1/1.2.2 - 'link-categories.php?cat_id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied data. The cross-site scripting and HTML injection issue...
CVE-2004-1219
paFileDB 3.1, when using sessions authentication and while the administrator logs on, allows remote attackers to read the administrator's password hash and conduct brute force password guessing attacks by listing the contents of the sessions directory and reading the associated file for the...
CVE-2004-1142
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service CPU consumption via a certain malformed SMB packet...
[SECURITY] [DSA 607-1] New libxpm packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 607-1 [email protected] http://www.debian.org/security/ Martin Schulze December 10th, 2004 http://www.debian.org/security/faq -...
CVE-2004-1020
The CVE-2004-1020 entry concerns PHP 4.3.9, where addslashes fails to properly escape a NULL character, potentially allowing remote attackers to read arbitrary files in PHP apps that have a directory traversal vulnerability in require/include statements (with magic_quotes_gpc enabled). Connected ...
CVE-2004-1129
SQL injection vulnerability in 1 fdelmail.asp, 2 addressc.asp, and possibly 3 postmail.asp and 4 fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter...
Mercury32 Mail Server 4.01 - Pegasus IMAP Buffer Overflow (2)
Mercury32 Mail Server 4.01 - Pegasus IMAP Buffer Overflow 2 / Remote Mercury32 Imap exploit 14 types of attacks WOW! By: [email protected] Notes: Second public release and both of them are murcury32 ; Again someone posted some dos code : why bother? If you spent the time to look, it uses the sa...
[Full-Disclosure] Players overflow in Serious engine UDP (was Alpha Black Zero, 29 Sep 2004)
Luigi Auriemma Application: Serious engine http://www.seriousengine.com Games: all the games based on this engine and using the UDP protocol: - Alpha Black Zero - Nitro family - Serious Sam Second Encounter 1.07 Platforms: Windows, Linux and Mac Bug: crash Exploitation: remote, versus server Date...