Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
March

CVEs published in March 2004

256 vulnerabilities, 47 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm cloudscapeIBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or...CVE-2004-025310.0 HighMarch 18, 2004
typsoft ftp serverTYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service (CPU consumption)...CVE-2004-02525.0 MediumMarch 18, 2004
rxgoogle.cgiCross-site scripting (XSS) vulnerability in rxgoogle.cgi allows remote attackers to execute...CVE-2004-0251Public exploit6.8 MediumMarch 18, 2004
photopost php proSQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain...CVE-2004-025010.0 HighMarch 18, 2004
phpxPHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the...CVE-2004-0249Public exploit10.0 HighMarch 18, 2004
phpxCross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute...CVE-2004-02486.8 MediumMarch 18, 2004
cauldron chaser client, chaser server +1 moreThe client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of...CVE-2004-0247Public exploit5.0 MediumMarch 18, 2004
laurent adda les commentairesMultiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2)...CVE-2004-0246Public exploit10.0 HighMarch 18, 2004
web crossing inc crossingWeb Crossing 4.x and 5.x allows remote attackers to cause a denial of service (crash) by sending...CVE-2004-0245Public exploit5.0 MediumMarch 18, 2004
cisco iosCisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a...CVE-2004-0244Public exploit4.7 MediumMarch 18, 2004
ibm aixAIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if...CVE-2004-02435.0 MediumMarch 18, 2004
qualiteam x-cartX-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1)...CVE-2004-0242Public exploit5.0 MediumMarch 18, 2004
qualiteam x-cartX-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument...CVE-2004-0241Public exploit10.0 HighMarch 18, 2004
qualiteam x-cartDirectory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files...CVE-2004-02405.0 MediumMarch 18, 2004
photopost php proSQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote...CVE-2004-0239Public exploit10.0 HighMarch 18, 2004
0verkillMultiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute...CVE-2004-0238Public exploit7.2 HighMarch 18, 2004
No product listedDirectory traversal vulnerability in index.php in Aprox PHP Portal allows remote attackers to...CVE-2004-0237Public exploit5.0 MediumMarch 18, 2004
steelid thephototoolSQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain...CVE-2004-023610.0 HighMarch 18, 2004
openssl, 4d webstar, apple mac os x +61 more +63 moreThe SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos...CVE-2004-0112Fix availableEPSS 10.4%5.0 MediumMarch 18, 2004
openssl, 4d webstar, apple mac os x +62 more +64 moreOpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote...CVE-2004-0081Fix available5.0 MediumMarch 17, 2004
openssl, 4d webstar, apple mac os x +62 more +64 moreThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows...CVE-2004-0079Fix available7.5 HighMarch 17, 2004
mambo open source 4.5SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows...CVE-2004-1826Public exploit7.5 HighMarch 16, 2004
mambo open sourceCross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and...CVE-2004-1825Public exploit4.3 MediumMarch 16, 2004
double precision incorporated sqwebmail, inter7 courier-imap, double precision incorporated courier mta +1 more +3 moreMultiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0,...CVE-2004-0224Fix available7.5 HighMarch 16, 2004
symantec antivirus scan engineThe LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red...CVE-2004-02177.0 HighMarch 16, 2004
redhat sysstat, sgi propack +1 moreThe (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite...CVE-2004-0107Fix available4.6 MediumMarch 16, 2004
sap mysap business suiteMultiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute...CVE-2003-10397.5 HighMarch 16, 2004
sap internet transaction serverThe AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain...CVE-2003-10385.0 MediumMarch 16, 2004
sap internet transaction serverFormat string vulnerability in the WGate component for SAP Internet Transaction Server (ITS)...CVE-2003-10377.5 HighMarch 16, 2004
sap internet transaction serverMultiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow...CVE-2003-10367.5 HighMarch 16, 2004
sap sapgui, r 3 +1 moreThe default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by...CVE-2003-10357.5 HighMarch 16, 2004
No product listedThe RPM installation of SAP DB 7.x creates the (1) dbmsrv or (2) lserver programs with world...CVE-2003-10344.6 MediumMarch 16, 2004
sap dbThe (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user...CVE-2003-10337.2 HighMarch 16, 2004
mozillaMozilla allows remote attackers to bypass intended cookie access restrictions on a web...CVE-2003-05947.5 HighMarch 16, 2004
opera browserOpera allows remote attackers to bypass intended cookie access restrictions on a web application...CVE-2003-05937.5 HighMarch 16, 2004
apple safariApple Safari allows remote attackers to bypass intended cookie access restrictions on a web...CVE-2003-0514Public exploit7.5 HighMarch 16, 2004
microsoft ie, internet explorer +1 moreMicrosoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions...CVE-2003-05137.5 HighMarch 16, 2004
ibm aixFormat string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local...CVE-2003-02577.2 HighMarch 16, 2004
brian renaud metricsThe (1) halstead and (2) gather_stats scripts in metrics 1.0 allow local users to overwrite...CVE-2003-02024.6 MediumMarch 16, 2004
sap sapguiSAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a...CVE-2002-15795.0 MediumMarch 16, 2004
sap r 3The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows...CVE-2002-15787.5 HighMarch 16, 2004
sap r 3SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows...CVE-2002-15777.5 HighMarch 16, 2004
sap dblserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the...CVE-2002-1576Public exploit7.2 HighMarch 16, 2004
gnome gdkpixbuf, redhat enterprise linux, gdk pixbuf +2 more +4 moregdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed...CVE-2004-0111Fix available5.0 MediumMarch 16, 2004
yabb, simple machines smf +1 moreCross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows...CVE-2004-1827Public exploit4.3 MediumMarch 15, 2004
phorumMultiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote...CVE-2004-1822Public exploit4.3 MediumMarch 15, 2004
warpspeed 4nalbum moduleSQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers...CVE-2004-1821Public exploit7.5 HighMarch 15, 2004
warpspeed 4nalbum modulePHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5...CVE-2004-1820Public exploit7.5 HighMarch 15, 2004
warpspeed 4nalbum module4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive information...CVE-2004-18195.0 MediumMarch 15, 2004
No product listedCross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through...CVE-2004-1818Public exploit6.8 MediumMarch 15, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open