Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

10.0

HIGH

CVE-2004-0461

The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vu...

Affected Products : suse_linux dhcpd mandrake_linux fedora_core dhcp dns_one_appliance suse_email_server suse_linux_admin-cd_for_firewall suse_linux_connectivity_server suse_linux_database_server +2 more products
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
10.0

HIGH

CVE-2004-0212

Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Exp...

Affected Products : windows_2000 windows_xp ie windows_nt modular_messaging_message_storage_server ip600_media_servers definity_one_media_server s8100
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
2.1

LOW

CVE-2004-0554

Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a ...

Affected Products : linux_kernel enterprise_linux suse_linux modular_messaging_message_storage_server linux linux converged_communications_server intuity_audix s8300 s8500 +8 more products
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
7.2

HIGH

CVE-2004-0495

Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool....

Affected Products : linux_kernel enterprise_linux suse_linux modular_messaging_message_storage_server linux linux converged_communications_server intuity_audix s8300 s8500 +8 more products
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
4.3

MEDIUM

CVE-2004-0589

Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers to cause a denial of service (device reload) via malformed BGP (1) OPEN or (2) UPDATE messages....

Affected Products : ios
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
5.0

MEDIUM

CVE-2004-0583

The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords....

Affected Products : debian_linux webmin usermin
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
6.4

MEDIUM

CVE-2004-0493

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header line...

Affected Products : http_server linux secure_linux converged_communications_server s8300 s8500 s8700 http_server
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
6.8

MEDIUM

CVE-2004-0588

Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages....

Affected Products : usermin
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
5.0

MEDIUM

CVE-2004-0417

Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume di...

Affected Products : openbsd propack linux openpkg cvs
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
10.0

HIGH

CVE-2004-0416

Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code....

Affected Products : openbsd propack linux openpkg cvs
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
7.2

HIGH

CVE-2004-0544

Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands....

Affected Products : aix
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
5.0

MEDIUM

CVE-2004-0582

Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration information for a module....

Affected Products : webmin
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
7.5

HIGH

CVE-2004-0204

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, an...

Affected Products : outlook visual_studio_.net weblogic_server crystal_enterprise crystal_reports j_builder crystal_enterprise_java_sdk crystal_enterprise_ras business_solutions_crm
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
10.0

HIGH

CVE-2004-0645

Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field....

Affected Products : community_abiword wvware
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
10.0

HIGH

CVE-2004-0460

Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVE...

Affected Products : suse_linux dhcpd mandrake_linux fedora_core dns_one_appliance suse_email_server suse_linux_admin-cd_for_firewall suse_linux_connectivity_server suse_linux_database_server suse_linux_firewall_cd +1 more products
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
10.0

HIGH

CVE-2004-0413

libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via an int...

Affected Products : openpkg subversion
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
7.2

HIGH

CVE-2004-0447

Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact. NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477. This is the proper candidate to use for the Linux local ...

Affected Products : linux_kernel enterprise_linux
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
10.0

HIGH

CVE-2004-0659

Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name....

Affected Products : mplayer
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
2.1

LOW

CVE-2004-0535

The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sour...

Affected Products : linux_kernel suse_linux linux linux mandrake_linux mandrake_linux_corporate_server mandrake_multi_network_firewall secure_linux secure_community suse_email_server +7 more products
Published: Aug. 06, 2004

Modified: Apr. 03, 2025
5.0

MEDIUM

CVE-2004-0215

Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header....

Affected Products : outlook_express modular_messaging_message_storage_server ip600_media_servers definity_one_media_server s8100
Published: Aug. 06, 2004

Modified: Apr. 03, 2025

Showing 20 of 292907 Results

Browse by Apps

Latest CVE Feed

10.0

10.0

2.1

7.2

4.3

5.0

6.4

6.8

5.0

10.0

7.2

5.0

7.5

10.0

10.0

10.0

7.2

10.0

2.1

5.0

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable