Latest CVE Feed
-
10.0
HIGHCVE-2004-0401
Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions.... Read more
Affected Products : libtasn1- EPSS Score: %0.86
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2004-0431
Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow.... Read more
Affected Products : quicktime- EPSS Score: %0.96
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0427
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local use... Read more
Affected Products : linux_kernel- EPSS Score: %0.16
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-0485
The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume.... Read more
- EPSS Score: %1.76
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-0399
Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.... Read more
Affected Products : exim- EPSS Score: %42.08
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-0398
Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.... Read more
- EPSS Score: %4.80
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-0488
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN... Read more
- EPSS Score: %58.16
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-0397
Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command.... Read more
Affected Products : subversion- EPSS Score: %86.59
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
7.6
HIGHCVE-2004-0489
Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitrary code via the ProxyCommand option or (2) conduct port forwarding via the -R option.... Read more
- EPSS Score: %14.29
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2004-0469
Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code du... Read more
- EPSS Score: %6.45
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0471
BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of serv... Read more
Affected Products : weblogic_server- EPSS Score: %0.06
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2004-0482
Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly... Read more
- EPSS Score: %0.09
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
2.6
LOWCVE-2004-0484
mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after t... Read more
Affected Products : internet_explorer- EPSS Score: %26.84
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2004-0404
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.... Read more
Affected Products : logcheck- EPSS Score: %0.07
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2004-0402
Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code.... Read more
- EPSS Score: %0.10
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0423
The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.... Read more
Affected Products : ssmtp- EPSS Score: %0.08
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2004-0424
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.... Read more
- EPSS Score: %0.24
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-0479
Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference.... Read more
Affected Products : ie- EPSS Score: %21.83
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2004-0475
The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash ("\\") before the target CHM file, as demonstrated using an "ms-its" URL to ntshared.chm. NOTE: this ... Read more
Affected Products : ie- EPSS Score: %9.90
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
2.6
LOWCVE-2004-0478
Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrat... Read more
Affected Products : mozilla- EPSS Score: %0.74
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025