Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
March

CVEs published in March 2004

256 vulnerabilities, 47 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

francisco burzi php-nukeMS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a...CVE-2004-18395.0 MediumMarch 22, 2004
xwebDirectory traversal vulnerability in xweb 1.0 allows remote attackers to download arbitrary files...CVE-2004-1838Public exploit5.0 MediumMarch 22, 2004
No product listedNews Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator...CVE-2004-1847Public exploit7.5 HighMarch 20, 2004
expinion.net news manager liteMultiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute...CVE-2004-1846Public exploit7.5 HighMarch 20, 2004
No product listedSQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute...CVE-2004-1843Public exploit7.5 HighMarch 20, 2004
apache http servermod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication...CVE-2004-1834Fix available2.1 LowMarch 20, 2004
borland software interbaseThe admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions,...CVE-2004-18337.5 HighMarch 20, 2004
atari terminator 3 war of the machinesBuffer overflow in Terminator 3: War of the Machines 1.0 allows remote attackers to cause a...CVE-2004-18535.0 MediumMarch 19, 2004
francisco burzi php-nukeerror.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive...CVE-2004-1830Public exploit5.0 MediumMarch 18, 2004
error manager php-nuke moduleMultiple cross-site scripting (XSS) vulnerabilities in error.php in Gijza.net Error Manager 2.1...CVE-2004-1829Public exploit4.3 MediumMarch 18, 2004
No product listedThe Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of...CVE-2004-0361Public exploit5.0 MediumMarch 18, 2004
sun solaris, sunos +1 moreUnknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges...CVE-2004-0360Public exploit7.2 HighMarch 18, 2004
invision power services boardCross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows...CVE-2004-03596.8 MediumMarch 18, 2004
virtuasystems virtuanews proCross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote...CVE-2004-0358Public exploit6.8 MediumMarch 18, 2004
seattle lab software slmail proStack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary...CVE-2004-035710.0 HighMarch 18, 2004
invision power services boardInvision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting...CVE-2004-03555.0 MediumMarch 18, 2004
gnu anubisMultiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow...CVE-2004-0354Public exploitEPSS 15.6%10.0 HighMarch 18, 2004
gnu anubisMultiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2,...CVE-2004-0353Public exploit10.0 HighMarch 18, 2004
cisco content services switch 11000, content services switch 11050, content services switch 11150 +1 more +3 moreCisco 11000 Series Content Services Switches (CSS) running WebNS 5.0(x) before 05.0(04.07)S, and...CVE-2004-03525.0 MediumMarch 18, 2004
spidersalesSpider Sales shopping cart stores the private key in the same database and table as the public...CVE-2004-03512.1 LowMarch 18, 2004
spidersalesSpiderSales shopping cart does not enforce a minimum length for the private key, which can make...CVE-2004-03502.1 LowMarch 18, 2004
gweb http serverDirectory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view...CVE-2004-0349Public exploit5.0 MediumMarch 18, 2004
spidersalesSQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote...CVE-2004-0348Public exploit10.0 HighMarch 18, 2004
proftpdOff-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows...CVE-2004-03467.8 HighMarch 18, 2004
volition red factionBuffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary...CVE-2004-0345Public exploit10.0 HighMarch 18, 2004
yabbDirectory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows...CVE-2004-0344Public exploit6.4 MediumMarch 18, 2004
yabbMultiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to...CVE-2004-0343Public exploit10.0 HighMarch 18, 2004
wftpd pro server project pro serverWFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to...CVE-2004-03425.5 MediumMarch 18, 2004
texas imperial software wftpdWFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent...CVE-2004-03412.1 LowMarch 18, 2004
texas imperial software wftpdStack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server...CVE-2004-0340Public exploit7.2 HighMarch 18, 2004
phpbb group phpbbCross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier,...CVE-2004-03396.8 MediumMarch 18, 2004
invision power services boardSQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to...CVE-2004-033810.0 HighMarch 18, 2004
software602 602pro lan suiteCross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to...CVE-2004-0337Public exploit6.8 MediumMarch 18, 2004
software602 602pro lan suiteLAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote...CVE-2004-03355.0 MediumMarch 18, 2004
innomedia videophoneInnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to...CVE-2004-03345.0 MediumMarch 18, 2004
uudeview, winzip, gentoo linux +1 more +3 moreBuffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and...CVE-2004-0333Public exploitFix availableEPSS 24.2%10.0 HighMarch 18, 2004
extremailExtremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit...CVE-2004-033210.0 HighMarch 18, 2004
dell openmanageHeap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a...CVE-2004-0331EPSS 15.8%5.0 MediumMarch 18, 2004
solarwinds serv-u file serverBuffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute...CVE-2004-0330Public exploitEPSS 85.5%10.0 HighMarch 18, 2004
freechatFreeChat 1.1.1a allows remote attackers to cause a denial of service (crash) via certain...CVE-2004-03295.0 MediumMarch 18, 2004
gigabyte gn-b46bGigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the...CVE-2004-03287.2 HighMarch 18, 2004
skintech phpnewsmanagerDirectory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers...CVE-2004-0327Public exploit5.0 MediumMarch 18, 2004
proxy-pro professional gatekeeperBuffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute...CVE-2004-0326Public exploitEPSS 62.0%10.0 HighMarch 18, 2004
typsoft ftp serverTYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU...CVE-2004-0325Public exploit2.1 LowMarch 18, 2004
xmb forum xmbMultiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject...CVE-2004-0323Public exploit7.5 HighMarch 18, 2004
singularity software team factorTeam Factor 1.25 and earlier allows remote attackers to cause a denial of service (crash) via a...CVE-2004-03215.0 MediumMarch 18, 2004
ezboardCross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers...CVE-2004-0319Public exploit6.8 MediumMarch 18, 2004
platform lsfLoad Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it...CVE-2004-0318Public exploit10.0 HighMarch 18, 2004
platform lsfBuffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote...CVE-2004-031710.0 HighMarch 18, 2004
avirt sohoBuffer overflow in Avirt Soho 4.3 allows remote attackers to cause a denial of service (crash)...CVE-2004-03165.0 MediumMarch 18, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open