Latest CVE Feed
-
5.0
MEDIUMCVE-2004-1742
Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (dot dot) in the viewcat parameter.... Read more
Affected Products : webapp- Published: Aug. 24, 2004
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-1752
Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email with a long Content-Type header.... Read more
Affected Products : gaucho- Published: Aug. 24, 2004
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2004-0800
Format string vulnerability in CDE Mailer (dtmail) on Solaris 8 and 9 allows local users to gain privileges via format strings in the argv[0] value.... Read more
- Published: Aug. 24, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-1743
Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the disk_c virtual folder.... Read more
Affected Products : efs_web_server- Published: Aug. 24, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-1744
Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption or crash) via many large HTTP requests.... Read more
Affected Products : efs_web_server- Published: Aug. 24, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-1745
Buffer overflow in Painkiller 1.3.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password.... Read more
Affected Products : painkiller- Published: Aug. 24, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-1739
Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users.... Read more
Affected Products : internet_chat_server- Published: Aug. 23, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-1741
Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service (crash) by calling LOAD with a binary file as an argument, then calling SHOWLIST.... Read more
Affected Products : music_daemon- Published: Aug. 23, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-1740
Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST.... Read more
Affected Products : music_daemon- Published: Aug. 23, 2004
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2004-1735
Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field.... Read more
Affected Products : sympa- Published: Aug. 21, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-1727
BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address.... Read more
Affected Products : badblue- Published: Aug. 20, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-1733
Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. (dot dot) sequences in the URL.... Read more
Affected Products : mydms- Published: Aug. 20, 2004
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-1728
Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling the client with a long string.... Read more
Affected Products : sara- Published: Aug. 20, 2004
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2004-1729
Cross-site scripting (XSS) vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.... Read more
Affected Products : web_log_analyzer- Published: Aug. 20, 2004
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-1726
Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow.... Read more
Affected Products : xv- Published: Aug. 20, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-1731
signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address.... Read more
Affected Products : mantis- Published: Aug. 20, 2004
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-1732
SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.... Read more
Affected Products : mydms- Published: Aug. 20, 2004
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2004-0507
Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.... Read more
- Published: Aug. 18, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-0762
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.... Read more
- Published: Aug. 18, 2004
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2004-0631
Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is... Read more
Affected Products : acrobat_reader- Published: Aug. 18, 2004
- Modified: Apr. 03, 2025