CVEs published in March 2004

256 vulnerabilities, 47 critical, 0 exploited.

• linbit technologies linbox officeserver LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or... CVE-2004-1878 Public exploit 5.0 MediumMarch 30, 2004
• oracle application server, http server +1 more The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single... CVE-2004-1877 2.6 LowMarch 30, 2004
• clam anti-virus clamav The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) before 0.70 allows... CVE-2004-1876 Fix available 4.6 MediumMarch 30, 2004
• cpanel Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to... CVE-2004-1875 Public exploit 9.3 HighMarch 30, 2004
• alan ward a-cart Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2) billing.asp in A... CVE-2004-1874 4.3 MediumMarch 29, 2004
• webct Cross-site scripting (XSS) vulnerability in WebCT Campus Edition 4.1.1.5 allows remote attackers... CVE-2004-1872 Public exploit 4.3 MediumMarch 29, 2004
• photopost php pro Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow... CVE-2004-1871 Public exploit 4.3 MediumMarch 29, 2004
• photopost php pro Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote... CVE-2004-1870 Public exploit 7.5 HighMarch 29, 2004
• adobe acrobat reader Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows... CVE-2004-0194 Public exploit EPSS 10.7% 7.5 HighMarch 29, 2004
• freebsd The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process... CVE-2004-0126 4.6 MediumMarch 29, 2004
• apache http server Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to... CVE-2004-0113 Fix available EPSS 11.0% 5.0 MediumMarch 29, 2004
• apache http server mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not... CVE-2003-0993 EPSS 10.8% 7.5 HighMarch 29, 2004
• pam-pgsql SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute... CVE-2004-0366 Fix available 7.5 HighMarch 29, 2004
• xine xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email... CVE-2004-0372 Fix available 2.1 LowMarch 27, 2004
• nstx ip over dns utility nstxd in Nstx 1.1 beta3 and earlier allows remote attackers to cause a denial of service (crash)... CVE-2004-1866 Public exploit 5.0 MediumMarch 26, 2004
• bblog Cross-site scripting (XSS) vulnerability in the administration panel in bBlog 0.7.2 allows remote... CVE-2004-1865 4.8 MediumMarch 26, 2004
• xmb forum xmb SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to... CVE-2004-1864 7.5 HighMarch 26, 2004
• xmb forum xmb Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9... CVE-2004-1862 4.3 MediumMarch 26, 2004
• esignal Stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to... CVE-2004-1868 Public exploit 7.5 HighMarch 25, 2004
• netsupport school Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which... CVE-2004-1861 Public exploit 4.6 MediumMarch 25, 2004
• ibm aix, open group cde common desktop environment, xi graphics dextop +2 more Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows... CVE-2004-0368 EPSS 10.1% 10.0 HighMarch 25, 2004
• ethereal group ethereal Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero... CVE-2004-0367 5.0 MediumMarch 25, 2004
• ethereal The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2... CVE-2004-0365 7.5 HighMarch 25, 2004
• openbsd Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a... CVE-2004-0222 5.0 MediumMarch 25, 2004
• openbsd isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash)... CVE-2004-0221 5.0 MediumMarch 25, 2004
• openbsd isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an... CVE-2004-0220 10.0 HighMarch 25, 2004
• openbsd isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash)... CVE-2004-0219 5.0 MediumMarch 25, 2004
• openbsd isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite... CVE-2004-0218 5.0 MediumMarch 25, 2004
• ethereal group ethereal Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial... CVE-2004-0176 Public exploitFix available EPSS 67.1% 5.0 MediumMarch 25, 2004
• apache http server Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on... CVE-2004-0174 EPSS 11.5% 7.5 HighMarch 25, 2004
• mollensoft software lightweight ftp server Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to... CVE-2004-2037 Public exploit 7.5 HighMarch 24, 2004
• trend micro interscan viruswall for windows nt Directory traversal vulnerability in Trend Micro Interscan Web Viruswall in InterScan VirusWall 3... CVE-2004-1859 Public exploit 5.0 MediumMarch 24, 2004
• hp web jetadmin Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote... CVE-2004-1857 Public exploit EPSS 86.8% 2.1 LowMarch 24, 2004
• hp web jetadmin devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows... CVE-2004-1856 Public exploit EPSS 29.5% 5.0 MediumMarch 24, 2004
• picophone internet telephone Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to... CVE-2004-1854 Public exploit 7.5 HighMarch 24, 2004
• dameware development mini remote control server Dameware Mini Remote Control 4.1.0.0 uses insufficiently random data to create the encryption key... CVE-2004-1851 7.5 HighMarch 24, 2004
• cpanel Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to... CVE-2004-1849 4.3 MediumMarch 24, 2004
• emil Multiple format string vulnerabilities in emil 2.1.0 and earlier may allow remote attackers to... CVE-2004-0153 7.5 HighMarch 24, 2004
• emil Multiple stack-based buffer overflows in (1) the encode_mime function, (2) the encode_uuencode... CVE-2004-0152 7.5 HighMarch 24, 2004
• ipswitch ws ftp pro, ws ftp server +1 more Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which... CVE-2004-1884 7.5 HighMarch 23, 2004
• mythic entertainment dark age of camelot Dark Age of Camelot before 1.68 live patch does not sign the RSA public key, which could allow... CVE-2004-1855 Public exploit 5.0 MediumMarch 23, 2004
• solarwinds dameware mini remote control DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption... CVE-2004-1852 5.0 MediumMarch 23, 2004
• fluidgames the rage The Rage 1.01 and earlier allows remote attackers to cause a denial of service (infinite loop)... CVE-2004-1850 5.0 MediumMarch 23, 2004
• symantec norton internet security The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for... CVE-2004-0364 7.5 HighMarch 23, 2004
• symantec norton antispam Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton... CVE-2004-0363 Public exploit EPSS 66.6% 7.5 HighMarch 23, 2004
• iss blackice agent server, blackice pc protection, blackice server protection +8 more +10 more Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis... CVE-2004-0362 Public exploit EPSS 73.3% 7.5 HighMarch 23, 2004
• linux kernel kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users... CVE-2003-1040 2.1 LowMarch 23, 2004
• ecartis Multiple buffer overflows in ecartis before 1.0.0 allow attackers to cause a denial of service... CVE-2003-0782 10.0 HighMarch 23, 2004
• ecartis Unknown vulnerability in ecartis before 1.0.0 does not properly validate user input, which allows... CVE-2003-0781 10.0 HighMarch 23, 2004
• francisco burzi php-nuke Multiple cross-site scripting (XSS) vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows... CVE-2004-1840 4.3 MediumMarch 22, 2004
• Show olderLoading…