CVEs published in April 2004

140 vulnerabilities, 8 critical, 0 exploited.

• coppermine photo gallery, francisco burzi php-nuke +1 more PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows... CVE-2004-1989 Public exploit 7.5 HighApril 30, 2004
• coppermine photo gallery, francisco burzi php-nuke +1 more PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4... CVE-2004-1988 Public exploit 7.5 HighApril 30, 2004
• coppermine photo gallery, francisco burzi php-nuke +1 more picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers... CVE-2004-1987 EPSS 10.2% 7.5 HighApril 30, 2004
• coppermine photo gallery, francisco burzi php-nuke +1 more Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b... CVE-2004-1985 Public exploit 4.3 MediumApril 30, 2004
• props Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view... CVE-2004-1980 5.0 MediumApril 30, 2004
• props Cross-site scripting (XSS) vulnerability in do_search.php in PROPS 0.6.1 allows remote attackers... CVE-2004-1979 4.3 MediumApril 30, 2004
• moodle Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers... CVE-2004-1978 Public exploit 4.3 MediumApril 30, 2004
• linux kernel The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly... CVE-2004-0427 Fix available 2.1 LowApril 30, 2004
• andrew tridgell rsync rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without... CVE-2004-0426 Fix available 5.0 MediumApril 30, 2004
• linux kernel, slackware linux, sgi propack +2 more Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1... CVE-2004-0424 Public exploitFix available 7.2 HighApril 30, 2004
• mcafee epolicy orchestrator McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to... CVE-2004-0038 7.5 HighApril 30, 2004
• libpng, openpkg, redhat enterprise linux +2 more +4 more The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a... CVE-2004-0421 Fix available 5.0 MediumApril 30, 2004
• 3com webbngss3nbxnts 3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of... CVE-2004-1977 5.0 MediumApril 29, 2004
• midnight commander commander, gentoo linux, sgi propack +2 more Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow... CVE-2004-0232 Fix available 5.0 MediumApril 29, 2004
• midnight commander commander, gentoo linux, sgi propack +2 more Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to... CVE-2004-0231 Fix available 2.1 LowApril 29, 2004
• midnight commander commander, gentoo linux, sgi propack +2 more Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a... CVE-2004-0226 Fix available 10.0 HighApril 29, 2004
• smc networks smc7004vbr SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which... CVE-2004-1976 7.5 HighApril 28, 2004
• php arena pafiledb Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1... CVE-2004-1975 Public exploit 4.3 MediumApril 27, 2004
• php arena pafiledb paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1)... CVE-2004-1974 5.0 MediumApril 27, 2004
• digi www server DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an... CVE-2004-1973 Public exploit 5.0 MediumApril 27, 2004
• francisco burzi php-nuke SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows... CVE-2004-1972 Public exploit 7.5 HighApril 26, 2004
• No product listed modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive... CVE-2004-1971 5.0 MediumApril 26, 2004
• securecomputing smartether ss6215s switch Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers... CVE-2004-1970 7.5 HighApril 26, 2004
• openbb The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote... CVE-2004-1968 Public exploit 5.0 MediumApril 26, 2004
• sun solaris, sunos +1 more Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a... CVE-2004-1355 2.1 LowApril 26, 2004
• citrix program neighborhood agent, metaframe client +1 more Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00... CVE-2004-1078 7.5 HighApril 26, 2004
• citrix program neighborhood agent, metaframe client +1 more Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation... CVE-2004-1077 5.0 MediumApril 26, 2004
• No product listed The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote... CVE-2004-1969 7.5 HighApril 25, 2004
• openbb Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3)... CVE-2004-1967 8.8 HighApril 25, 2004
• No product listed Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and... CVE-2004-1965 Public exploit 4.3 MediumApril 25, 2004
• freshmeat network query tool Cross-site scripting (XSS) vulnerability in nqt.php in Network Query Tool (NQT) 1.6 allows remote... CVE-2004-1964 4.3 MediumApril 23, 2004
• No product listed nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to obtain sensitive information... CVE-2004-1963 5.0 MediumApril 23, 2004
• protector system system blocker.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection protection... CVE-2004-1961 7.5 HighApril 23, 2004
• protector system system blocker_query.php in Protector System 1.15b1 for PHP-Nuke allows remote attackers to gain... CVE-2004-1959 5.0 MediumApril 23, 2004
• advanced guestbook guestbook SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute... CVE-2004-1952 Public exploit 7.5 HighApril 23, 2004
• sun solaris, sunos +1 more Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to... CVE-2004-1356 2.1 LowApril 23, 2004
• No product listed Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to... CVE-2004-1957 Public exploit 2.6 LowApril 21, 2004
• postnuke software foundation postnuke PostNuke 0.7.2.6 allows remote attackers to gain information via a direct HTTP request to files... CVE-2004-1956 5.0 MediumApril 21, 2004
• phprofession Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote... CVE-2004-1954 Public exploit 4.3 MediumApril 21, 2004
• michael bacarella ident2 Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers... CVE-2004-0408 Fix available 7.5 HighApril 21, 2004
• solarwinds serv-u file server Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of... CVE-2004-1992 Public exploit EPSS 11.2% 5.0 MediumApril 20, 2004
• ncftp software ncftp NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is... CVE-2004-1948 Fix available 4.6 MediumApril 20, 2004
• kinesphere corporation exchange pop3 Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via... CVE-2004-1945 Public exploit 7.5 HighApril 20, 2004
• ssmtp The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary... CVE-2004-0423 2.1 LowApril 20, 2004
• microsoft ie, internet explorer +1 more The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP... CVE-2004-0420 EPSS 46.0% 10.0 HighApril 20, 2004
• phpbb group phpbb phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header,... CVE-2004-1950 5.0 MediumApril 19, 2004
• softwin bitdefender The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote... CVE-2004-1947 Public exploit 5.0 MediumApril 19, 2004
• cherokee httpd Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4... CVE-2004-1946 4.6 MediumApril 19, 2004
• phpbb group phpbb PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8... CVE-2004-1943 Public exploit 7.5 HighApril 19, 2004
• sun patch manager The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent... CVE-2004-1942 7.5 HighApril 19, 2004
• Show olderLoading…