CVEs published in May 2004
89 vulnerabilities, 10 critical, 0 exploited.
- adam webb nukejokesCross-site scripting (XSS) vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote...4.3 Medium
- trend micro officescanTrend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the...4.6 Medium
- university of cambridge eximStack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is...7.5 High
- university of cambridge eximStack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify...7.5 High
- qualcomm eudoraBuffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute...5.1 Medium
- suse linuxThe Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which...10.0 High
- delegateBuffer overflow in the ssl_prcert function in the SSLway filter (sslway.c) for DeleGate 8.9.2 and...7.5 High
- south river technologies titan ftp serverTitan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows...5.0 Medium
- apple quicktimeInteger overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute...5.1 Medium
- apple mac os x, mac os x server +1 moreStack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote...5.1 Medium
- kame racoonracoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and...5.0 Medium
- verity ultraseekVerity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document...5.0 Medium
- sgi irixUnknown vulnerability in SGI IRIX 6.5 through 6.5.22m allows remote attackers to cause a denial...5.0 Medium
- sgi irixifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being...4.6 Medium
- No product listedSQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote...7.5 High
- francisco burzi php-nukeCross-site scripting (XSS) vulnerability in the Downloads module in Php-Nuke 6.x through 7.2...4.3 Medium
- francisco burzi php-nukeThe Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive...5.0 Medium
- kolab groupware server, openpkg +1 moreKolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world...4.6 Medium
- simple machines smfCross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.0 allows remote...4.3 Medium
- e-zone media inc. fusetalkFuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm.5.0 Medium
- mplayer, xine xine-lib +1 moreMultiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer...10.0 High
- proftpd project proftpd, gentoo linux, trustix secure linux +2 moreProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were...7.5 High
- netegrity sideminder affiliate agentHeap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute...10.0 High
- linux kernelA "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not...2.1 Low
- symantec client firewall, client security, norton internet security +1 more +3 moreSYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and...5.0 Medium
- redhat lha, clearswift mailsweeper, f-secure anti-virus +9 more +11 moreMultiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to...6.4 Medium
- redhat lha, clearswift mailsweeper, f-secure anti-virus +9 more +11 moreMultiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as...10.0 High
- utempter, sgi propack, slackware linux +2 moreUtempter allows device names that contain .. (dot dot) directory traversal sequences, which...2.1 Low
- juniper junos, mcafee network data loss prevention, microsoft windows 2000 +9 more +11 moreTCP, when using a large Window Size, makes it easier for remote attackers to guess sequence...5.0 Medium
- gentoo linux, linux kernel +1 moreThe framebuffer driver in Linux kernel 2.6.x does not properly use the fb_copy_cmap function,...4.6 Medium
- omail webmailThe patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which...10.0 High
- aldostools aldo\'s web serverDirectory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view...5.0 Medium
- yabbPost.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file...5.0 Medium
- apple mac os x, mac os x server +1 moreUnknown vulnerability in CoreFoundation in Mac OS X 10.3.3 and Mac OS X 10.3.3 Server, related to...5.0 Medium
- coppermine photo gallery, francisco burzi php-nuke +1 moreCoppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive...5.0 Medium
- gentoo linux, the pax team pax linux +1 moreThe arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when...2.1 Low
- businessobjects crystal reports, crystal enterprise +1 moreThe web interface for Crystal Reports allows remote attackers to cause a denial of service (disk...5.0 Medium
- borland software interbase, firebirdsql firebird, borland software interbase superserver +2 moreBuffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly...5.0 Medium
- gnu flimflim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite...2.1 Low