CVEs published in May 2004

89 vulnerabilities, 10 critical, 0 exploited.

• e107 Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary... CVE-2004-2042 7.5 HighMay 29, 2004
• No product listed PHP remote file inclusion vulnerability in secure_img_render.php in e107 0.615 allows remote... CVE-2004-2041 7.5 HighMay 29, 2004
• e107 Multiple cross-site scripting (XSS) vulnerabilities in e107 0.615 allow remote attackers to... CVE-2004-2040 Public exploit 4.3 MediumMay 29, 2004
• e107 e107 0.615 allows remote attackers to obtain sensitive information via a direct request to (1)... CVE-2004-2039 5.0 MediumMay 29, 2004
• neocrome land down under Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows remote... CVE-2004-2038 Public exploit 4.3 MediumMay 29, 2004
• jftpgw Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote... CVE-2004-0448 Fix available 10.0 HighMay 29, 2004
• gatos The xatitv program in the gatos package does not properly drop root privileges when the... CVE-2004-0395 Fix available 7.2 HighMay 29, 2004
• jportal web portal SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of... CVE-2004-2036 Public exploit 7.5 HighMay 28, 2004
• apple mac os x Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier... CVE-2004-0489 7.6 HighMay 28, 2004
• apache http server, debian linux, redhat enterprise linux server +1 more +3 more Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache... CVE-2004-0488 Fix available EPSS 37.7% 7.5 HighMay 28, 2004
• apple mac os x, mac os x server +1 more HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can... CVE-2004-0486 Public exploit 7.6 HighMay 28, 2004
• apple mac os x The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote... CVE-2004-0485 5.0 MediumMay 28, 2004
• subversion Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier... CVE-2004-0397 Public exploitFix available EPSS 75.2% 7.5 HighMay 28, 2004
• linux kernel cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or... CVE-2004-2135 Public exploit 2.1 LowMay 26, 2004
• minishare minimal http server MiniShare 1.3.2 allows remote attackers to cause a denial of service (crash) via a malformed HTTP... CVE-2004-2035 Public exploit 5.0 MediumMay 26, 2004
• orenosv http ftp server Orenosv 0.5.9f allows remote attackers to cause a denial of service (crash) via a long HTTP GET... CVE-2004-2033 Public exploit 5.0 MediumMay 26, 2004
• netgear rp114 Netgear RP114 allows remote attackers to bypass the keyword based URL filtering by requesting a... CVE-2004-2032 Public exploit 7.5 HighMay 24, 2004
• liferay enterprise portal Multiple cross-site scripting (XSS) vulnerabilities in index.jsp for Liferay before 2.2.0 release... CVE-2004-2030 Public exploit 4.3 MediumMay 22, 2004
• trevor hogan bnbt The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows... CVE-2004-2029 Public exploit 5.0 MediumMay 22, 2004
• xpcd, mandrakesoft mandrake linux +1 more Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local... CVE-2004-0402 Fix available 4.6 MediumMay 22, 2004
• e107 Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject... CVE-2004-2031 4.3 MediumMay 21, 2004
• e107 Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject... CVE-2004-2028 Public exploit 4.3 MediumMay 21, 2004
• microsoft internet explorer mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of... CVE-2004-0484 Public exploit EPSS 21.9% 2.6 LowMay 20, 2004
• sgi irix Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial... CVE-2004-0483 5.0 MediumMay 20, 2004
• openbsd Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4)... CVE-2004-0482 4.6 MediumMay 20, 2004
• microsoft ie Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript... CVE-2004-0479 Public exploit EPSS 25.8% 5.0 MediumMay 20, 2004
• mozilla Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM... CVE-2004-0478 2.6 LowMay 20, 2004
• microsoft ie The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute... CVE-2004-0475 EPSS 10.0% 5.1 MediumMay 20, 2004
• microsoft windows xp Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an ... CVE-2004-0474 Public exploit EPSS 16.2% 5.1 MediumMay 20, 2004
• opera browser Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters... CVE-2004-0473 2.6 LowMay 20, 2004
• bea weblogic server BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce... CVE-2004-0471 2.1 LowMay 20, 2004
• bea weblogic server BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing... CVE-2004-0470 7.5 HighMay 20, 2004
• ieee 802.11 wireless protocol The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using... CVE-2004-0459 5.0 MediumMay 20, 2004
• symantec client firewall, client security, norton antispam +2 more +4 more The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004,... CVE-2004-0445 Public exploit EPSS 11.0% 2.6 LowMay 20, 2004
• symantec client firewall, client security, norton antispam +2 more +4 more Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional... CVE-2004-0444 EPSS 12.8% 10.0 HighMay 20, 2004
• kde konqueror The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters... CVE-2004-0411 Fix available 7.5 HighMay 20, 2004
• microsoft ie, internet explorer +1 more Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a... CVE-2003-1041 Public exploit EPSS 52.6% 7.5 HighMay 20, 2004
• webdav cadaver, neon, debian linux +2 more Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library ... CVE-2004-0398 Fix available 7.5 HighMay 19, 2004
• cvs Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the... CVE-2004-0396 Public exploitFix available EPSS 67.5% 7.5 HighMay 19, 2004
• sun solaris, sunos +1 more The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error... CVE-2004-1354 5.0 MediumMay 14, 2004
• checkpoint firewall-1, vpn-1, next generation +1 more +3 more Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products,... CVE-2004-0469 10.0 HighMay 14, 2004
• free software foundation inc. libtasn1 Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER... CVE-2004-0401 10.0 HighMay 14, 2004
• microsoft windows xp, windows 2003 server +1 more Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly... CVE-2004-0199 EPSS 26.1% 5.1 MediumMay 14, 2004
• nicolas boullis mah-jong, debian linux +1 more mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a... CVE-2004-0458 Fix available 7.5 HighMay 13, 2004
• heimdal project heimdal, debian linux +1 more k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4... CVE-2004-0434 Fix available 9.8 CriticalMay 12, 2004
• triornis zoneminder Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to... CVE-2004-0227 Fix available 7.5 HighMay 12, 2004
• nfs nfs-utils rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of... CVE-2004-0154 Fix available 5.0 MediumMay 12, 2004
• icecast Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service... CVE-2004-2027 Fix available 5.0 MediumMay 10, 2004
• No product listed NukeJokes 1.7 and 2 Beta allows remote attackers to obtain the full path of the server via (1) a... CVE-2004-2009 5.0 MediumMay 8, 2004
• adam webb nukejokes SQL injection vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to... CVE-2004-2008 Public exploit 4.6 MediumMay 8, 2004
• Show olderLoading…