CVEs published in January 2004
100 vulnerabilities, 6 critical, 0 exploited.
- cvsup Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the... 4.6 Medium
- pj cgi neo review cgi neo review Directory traversal vulnerability in PJreview_Neo.cgi in PJ CGI Neo review allows remote... 5.0 Medium
- wildtangent webdriver Buffer overflow in the (1) WTHoster and (2) WebDriver modules in WildTangent Web Driver 4.0... 7.5 High
- apple mac os x Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact. 10.0 High
- apple mac os x The System Configuration subsystem in Mac OS 10.2.8 allows local users to modify network settings... 2.1 Low
- apple mac os x The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify... 2.1 Low
- apple mac os x Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack... 5.0 Medium
- apple mac os x Unknown vulnerability in the Mail application for Mac OS X 10.1.5 and 10.2.8 with unknown impact,... 5.0 Medium
- rob flynn gaim, ultramagnetic +1 more Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers... 7.5 High
- rob flynn gaim, ultramagnetic +1 more Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in... 7.5 High
- rob flynn gaim, ultramagnetic +1 more Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote... 7.5 High
- oracle application server Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows... 4.6 Medium
- yamamoto hirotaka trr19 Multiple programs in trr19 1.0 do not properly drop privileges before executing a system command,... 4.6 Medium
- ibm informix dynamic server, informix extended parallel server +1 more Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier... 7.2 High
- pi3 pi3web Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column... 5.0 Medium
- intra forum forum Cross-site scripting (XSS) vulnerability in intraforum_db.cgi in Intra Forum allows remote... 4.3 Medium
- tinyserver Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP... 5.0 Medium
- reptile web server web server Reptile Web Server allows remote attackers to cause a denial of service (CPU consumption) via... 5.0 Medium
- jelsoft vbulletin ** DISPUTED ** NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS)... 4.3 Medium
- michael bischoff xsok Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG... 4.6 Medium
- No product listed Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote... 4.3 Medium
- redhat kernel The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access... 7.5 High
- ibm director agent, cisco call manager, conference connection +14 more +16 more The default installation of Cisco voice products, when running the IBM Director Agent on IBM... 10.0 High
- ibm director agent, cisco call manager, conference connection +14 more +16 more Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6,... 5.0 Medium
- leif m. wright web blog Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files... 5.0 Medium
- No product listed The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable... 5.0 Medium
- jelsoft vbulletin SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote... 5.0 Medium
- phorum SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers... 7.5 High
- phpgedview admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an... 5.0 Medium
- phpgedview Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers... 6.8 Medium
- phpgedview PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator... 7.5 High
- netpbm netpbm 9.25 and earlier does not properly create temporary files, which allows local users to... 3.7 Low
- novell nsure audit webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via... 5.0 Medium
- stoitsov easydynamicpages PHP remote file inclusion vulnerability in (1) config.php and (2) config_page.php for... 7.5 High
- accipiter direct server Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read... 5.0 Medium
- No product listed Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page... 5.0 Medium
- hd soft windows ftp server Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers... 7.5 High
- phpgedview Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote... 4.3 Medium
- phpgedview phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via... 5.0 Medium
- phpgedview Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to... 7.5 High
- suse linux The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite... 2.1 Low
- fishnet fishcart Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before... 7.5 High
- lionmax software www file share pro WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access... 7.5 High
- lionmax software www file share pro WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service (crash)... 5.0 Medium
- lionmax software www file share pro Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier... 5.0 Medium
- linux kernel Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary... 2.1 Low
- lbl tcpdump The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and... 5.0 Medium
- nortel 802.11 wireless ip gateway, business communications manager, succession communication server 1000 +2 more Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business... 7.5 High
- lbl tcpdump The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote... 5.0 Medium
- cisco ios Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T... 7.5 High
- Show olderLoading…