CVEs published in April 2004
140 vulnerabilities, 8 critical, 0 exploited.
- ssmtpFormat string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6...5.0 Medium
- linux kernelBuffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x,...4.6 Medium
- francisco burzi php-nukeSQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2...7.5 High
- bea weblogic serverBEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6...4.6 Medium
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using...5.0 Medium
- No product listedCitadel/UX 5.00 through 6.14 installs the database directory and files with world-read...2.1 Low
- francisco burzi php-nukeSQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows...7.5 High
- francisco burzi php-nukeCross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP...4.3 Medium
- tiki tikiwiki cms\/groupwareThe image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote...7.5 High
- tiki tikiwiki cms\/groupwareMultiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow...7.5 High
- icmp, tcp +1 moreMultiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow...5.0 Medium
- tiki tikiwiki cms\/groupwareDirectory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware ...5.0 Medium
- tiki tikiwiki cms\/groupwareTiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code...7.5 High
- tiki tikiwiki cms\/groupwareMultiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and...4.3 Medium
- tiki tikiwiki cms\/groupwareTiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive...5.0 Medium
- microsoft internet explorerMicrosoft Internet Explorer 5.5 and 6.0 allocates memory based on the memory size written in the...2.6 Low
- x-micro wlan 11b broadband router firmwareX-Micro WLAN 11b Broadband Router 1.6.0.1 has a hardcoded "1502" username and password, which...7.5 High
- x-micro wlan 11b broadband router firmwareX-Micro WLAN 11b Broadband Router 1.2.2, 1.2.2.3, 1.2.2.4, and 1.6.0.0 has a hardcoded "super"...7.5 High
- crackalakaThe hash_strcmp function in hasch.c in Crackalaka 1.0.8 allows remote attackers to cause a denial...5.0 Medium
- rsniffRSniff 1.0 allows remote attackers to cause a denial of service (connection exhaustion) via a...5.0 Medium
- lcdprocFormat string vulnerability in test_func_func in LCDProc 0.4.1 and earlier allows remote...7.5 High
lcdprocDebianMultiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows...7.5 High- lcdprocBuffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows...7.5 High
- sun solarisThe Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 does not properly log IP addresses when...5.0 Medium
- mplayer, gentoo linux, mandrakesoft mandrake linux +2 moreBuffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote...10.0 High
- apple mac os xUnknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to ...7.2 High
- apple mac os xUnknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with...7.2 High
- microsoft sharepoint portal serverMultiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001...6.8 Medium
- mysqlmysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the...2.1 Low
- microsoft outlook expressThe MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1...10.0 High
- activestate activeperl, larry wall perl +1 moreBuffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's...10.0 High
- freebsdThe setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not...2.1 Low
- kth heimdalHeimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency...5.0 Medium
- tcpdumpInteger underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to...5.0 Medium
- tcpdumpTCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP...5.0 Medium
- coppermine photo gallery, francisco burzi php-nuke +1 moreDirectory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4...5.0 Medium
- oftpdoftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT...5.0 Medium
- debian linux, fte text editor +1 moreMultiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute...10.0 High
- No product listedUnknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause...5.0 Medium
- interchange development group interchangeInterchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables"...6.4 Medium