|
344101
|
6.8 |
MEDIUM
|
open_webmail
sgi
squirrelmail
|
open_webmail
propack
squirrelmail
|
Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in read_body.php, (2) the…
|
NVD-CWE-Other
|
CVE-2004-0639
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344102
|
10.0 |
HIGH
|
netkit
ssltelnetd
|
linux_netkit
secure_telnet
|
Format string vulnerability in the SSL_set_verify function in telnetd.c for SSLtelnet daemon (SSLtelnetd) 0.13 allows remote attackers to execute arbitrary code.
|
NVD-CWE-Other
|
CVE-2004-0640
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344103
|
7.5 |
HIGH
|
thomson
|
speedtouch
|
Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijac…
|
NVD-CWE-Other
|
CVE-2004-0641
|
2017-07-11 10:30 |
2004-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344104
|
10.0 |
HIGH
|
abisource
wvware
|
community_abiword
wvware
|
Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime fiel…
|
NVD-CWE-Other
|
CVE-2004-0645
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344105
|
10.0 |
HIGH
|
macromedia
|
coldfusion
jrun
|
Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to…
|
NVD-CWE-Other
|
CVE-2004-0646
|
2017-07-11 10:30 |
2004-12-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344106
|
4.6 |
MEDIUM
|
shorewall
|
shorewall
|
shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file.
|
NVD-CWE-Other
|
CVE-2004-0647
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344107
|
10.0 |
HIGH
|
mozilla
|
firefox
mozilla
thunderbird
|
Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol.
|
NVD-CWE-Other
|
CVE-2004-0648
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344108
|
10.0 |
HIGH
|
l2tpd
gentoo
|
l2tpd
linux
|
Buffer overflow in write_packet in control.c for l2tpd may allow remote attackers to execute arbitrary code.
|
NVD-CWE-Other
|
CVE-2004-0649
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344109
|
10.0 |
HIGH
|
newatlanta
|
servletexec
|
UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL.
|
NVD-CWE-Other
|
CVE-2004-0650
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344110
|
7.2 |
HIGH
|
bea
|
weblogic_server
|
BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly ac…
|
NVD-CWE-Other
|
CVE-2004-0652
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344111
|
7.2 |
HIGH
|
-
|
-
|
eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file.
|
NVD-CWE-Other
|
CVE-2004-0655
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344112
|
5.0 |
MEDIUM
|
pureftpd
|
pureftpd
|
The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum number of connections.
|
NVD-CWE-Other
|
CVE-2004-0656
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344113
|
7.2 |
HIGH
|
linux
|
linux_kernel
|
Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 allows local users to cause a denial of service (crash) and p…
|
NVD-CWE-Other
|
CVE-2004-0658
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344114
|
10.0 |
HIGH
|
mplayer
|
mplayer
|
Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name.
|
NVD-CWE-Other
|
CVE-2004-0659
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344115
|
6.8 |
MEDIUM
|
cutephp
|
cutenews
|
Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows remote attackers to inject arbitrary script or HTML via the…
|
NVD-CWE-Other
|
CVE-2004-0660
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344116
|
5.0 |
MEDIUM
|
d-link
|
di-604
di-614\+
di-624
|
Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME op…
|
NVD-CWE-Other
|
CVE-2004-0661
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344117
|
5.0 |
MEDIUM
|
powerportal
|
powerportal
|
PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP requests to (1) resize.php or (2) modules.php, which reveals the path in an error messa…
|
NVD-CWE-Other
|
CVE-2004-0662
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344118
|
6.8 |
MEDIUM
|
powerportal
|
powerportal
|
Cross-site scripting (XSS) vulnerability in modules.php in PowerPortal 1.x allows remote attackers to inject arbitrary script or HTML via the (1) id parameter to the (a) private_messages module; (2) …
|
NVD-CWE-Other
|
CVE-2004-0663
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344119
|
5.0 |
MEDIUM
|
powerportal
|
powerportal
|
Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directories via a .. (dot dot) in the files parameter.
|
NVD-CWE-Other
|
CVE-2004-0664
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344120
|
5.0 |
MEDIUM
|
cgiscript.net
|
csfaq
|
csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the web server in an error message.
|
NVD-CWE-Other
|
CVE-2004-0665
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344121
|
7.5 |
HIGH
|
popclient
|
popclient
|
Off-by-one error in the POP3_readmsg function in popclient 3.0b6 allows remote attackers to cause a denial of service (application crash) via an e-mail message with a certain line length, which leads…
|
NVD-CWE-Other
|
CVE-2004-0666
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344122
|
5.0 |
MEDIUM
|
-
|
-
|
Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service (server crash) via a large e-mail message, as demonstrated using a large image attachment.
|
NVD-CWE-Other
|
CVE-2004-0668
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344123
|
7.5 |
HIGH
|
ibm
|
lotus_domino
|
Lotus Domino 6.5.0 and 6.5.1, with IMAP enabled, allows remote authenticated users to change their quota by using the IMAP setquota command.
|
NVD-CWE-Other
|
CVE-2004-0669
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344124
|
5.0 |
MEDIUM
|
zyxel
|
prestige
|
Prestige 650HW-31 running Rompager 4.7 software allows remote attackers to cause a denial of service (device reboot) via a long password.
|
NVD-CWE-Other
|
CVE-2004-0670
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344125
|
5.0 |
MEDIUM
|
symantec
|
brightmail_antispam
|
Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying the id parameter in a viewMsgDetails.do request.
|
NVD-CWE-Other
|
CVE-2004-0671
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344126
|
6.8 |
MEDIUM
|
netegrity
|
identityminder
policy_server
|
Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users v…
|
NVD-CWE-Other
|
CVE-2004-0672
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344127
|
6.8 |
MEDIUM
|
simm-comm
|
sci_photo_chat
|
Cross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting e…
|
NVD-CWE-Other
|
CVE-2004-0673
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344128
|
5.0 |
MEDIUM
|
enterasys
|
xsr-1805
xsr-1850
xsr-3000
|
Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service (crash) via a packet with the IP record r…
|
NVD-CWE-Other
|
CVE-2004-0674
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344129
|
6.8 |
MEDIUM
|
mcmurtrey_whitaker_and_associates
|
cart32
|
Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBui…
|
NVD-CWE-Other
|
CVE-2004-0675
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344130
|
5.0 |
MEDIUM
|
fastream
|
netfile_ftp_web_server
|
Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service (temporary hang) via the cd command with an unusual argument, possibly due to multiple leading …
|
NVD-CWE-Other
|
CVE-2004-0677
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344131
|
4.3 |
MEDIUM
|
12planet
|
chat_server
|
Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2004-0678
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344132
|
5.0 |
MEDIUM
|
unreal
|
unrealircd
|
The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gai…
|
NVD-CWE-Other
|
CVE-2004-0679
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344133
|
10.0 |
HIGH
|
zoom
|
model_5560_x3_ethernet_adsl_modem
|
Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow …
|
NVD-CWE-Other
|
CVE-2004-0680
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344134
|
6.8 |
MEDIUM
|
comersus_open_technologies
|
comersus_cart
|
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4) comersus_message.asp in Co…
|
NVD-CWE-Other
|
CVE-2004-0681
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344135
|
6.8 |
MEDIUM
|
comersus_open_technologies
|
comersus_cart
|
This vulnerability is addressed in the following product update:
Comersus Open Technologies, Comersus Cart, 5.098
|
NVD-CWE-Other
|
CVE-2004-0681
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344136
|
7.5 |
HIGH
|
comersus_open_technologies
|
comersus_cart
|
comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL.
|
NVD-CWE-Other
|
CVE-2004-0682
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344137
|
5.0 |
MEDIUM
|
symantec
|
norton_antivirus
|
Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a compressed archive that contains a large number of directories.
|
NVD-CWE-Other
|
CVE-2004-0683
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344138
|
5.0 |
MEDIUM
|
ibm
|
websphere_caching_proxy_server
websphere_edge_server_caching_proxy
|
WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allows remote attackers to cause a denial of service via an HTTP GET request without …
|
NVD-CWE-Other
|
CVE-2004-0684
|
2017-07-11 10:30 |
2004-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344139
|
4.6 |
MEDIUM
|
kde
|
kde
|
The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory.
|
NVD-CWE-Other
|
CVE-2004-0690
|
2017-07-11 10:30 |
2004-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344140
|
7.5 |
HIGH
|
4d
|
webstar
|
Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command.
|
NVD-CWE-Other
|
CVE-2004-0695
|
2017-07-11 10:30 |
2004-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344141
|
5.0 |
MEDIUM
|
4d
|
webstar
|
The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character.
|
NVD-CWE-Other
|
CVE-2004-0696
|
2017-07-11 10:30 |
2004-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344142
|
5.0 |
MEDIUM
|
4d
|
webstar
|
Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information.
|
NVD-CWE-Other
|
CVE-2004-0697
|
2017-07-11 10:30 |
2004-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344143
|
3.6 |
LOW
|
4d
|
webstar
|
4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack.
|
NVD-CWE-Other
|
CVE-2004-0698
|
2017-07-11 10:30 |
2004-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344144
|
7.5 |
HIGH
|
checkpoint
|
firewall-1
vpn-1
|
Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE neg…
|
NVD-CWE-Other
|
CVE-2004-0699
|
2017-07-11 10:30 |
2004-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344145
|
7.5 |
HIGH
|
mod_ssl
gentoo
|
mod_ssl
linux
|
Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via…
|
NVD-CWE-Other
|
CVE-2004-0700
|
2017-07-11 10:30 |
2004-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344146
|
4.6 |
MEDIUM
|
sun
|
ray_server_software
|
Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a u…
|
NVD-CWE-Other
|
CVE-2004-0701
|
2017-07-11 10:30 |
2004-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344147
|
5.0 |
MEDIUM
|
mozilla
|
bugzilla
|
DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information.
|
NVD-CWE-Other
|
CVE-2004-0702
|
2017-07-11 10:30 |
2004-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344148
|
7.5 |
HIGH
|
mozilla
|
bugzilla
|
Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control.
|
NVD-CWE-Other
|
CVE-2004-0703
|
2017-07-11 10:30 |
2004-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344149
|
5.0 |
MEDIUM
|
-
|
-
|
Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden product…
|
NVD-CWE-Other
|
CVE-2004-0704
|
2017-07-11 10:30 |
2004-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344150
|
6.8 |
MEDIUM
|
-
|
-
|
Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.cgi, (5) editusers.cgi, and (6) editversions.cgi in Bugzill…
|
NVD-CWE-Other
|
CVE-2004-0705
|
2017-07-11 10:30 |
2004-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
