CVEs published in June 2004

120 vulnerabilities, 33 critical, 0 exploited.

• websoft infinity web SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication... CVE-2004-0625 7.5 HighJune 30, 2004
• artmedic webdesign links PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 (artmedic_links5)... CVE-2004-0624 7.5 HighJune 30, 2004
• gnu gnats Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute... CVE-2004-0623 Fix available 10.0 HighJune 30, 2004
• apple mac os x Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for... CVE-2004-0622 2.1 LowJune 30, 2004
• zaireweb solutions newsletter zws admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a... CVE-2004-0621 Public exploit 10.0 HighJune 30, 2004
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3... CVE-2004-0620 Public exploit 4.3 MediumJune 30, 2004
• redhat linux, fedora core, kernel +2 more Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows... CVE-2004-0619 Fix available 7.2 HighJune 30, 2004
• freebsd FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via... CVE-2004-0618 Public exploit 2.1 LowJune 30, 2004
• arbitroweb Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject... CVE-2004-0617 Public exploit 6.8 MediumJune 30, 2004
• bt voyager 2000 wireless adsl router The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows... CVE-2004-0616 Public exploit 5.0 MediumJune 30, 2004
• dlink di-624, d-link di-614\+, di-704p +2 more Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and... CVE-2004-0615 Public exploit 5.1 MediumJune 30, 2004
• osticket sts osTicket trusts a hidden form field in the submit form to limit the upload size of a document,... CVE-2004-0614 6.4 MediumJune 30, 2004
• osticket sts osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary... CVE-2004-0613 Public exploit 7.5 HighJune 30, 2004
• zonelabs zonealarm The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL... CVE-2004-0612 5.1 MediumJune 30, 2004
• netgear fvs318 Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial... CVE-2004-0611 5.0 MediumJune 30, 2004
• microsoft mn-500 wireless base station The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to... CVE-2004-0610 EPSS 14.8% 5.0 MediumJune 30, 2004
• rssh rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows... CVE-2004-0609 5.0 MediumJune 30, 2004
• arush devastation, epic games unreal engine, unreal tournament +11 more +13 more The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile... CVE-2004-0608 Public exploit EPSS 73.5% 10.0 HighJune 30, 2004
• kame racoon, ipsec-tools, redhat enterprise linux +1 more +3 more The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when... CVE-2004-0607 Fix available 10.0 HighJune 30, 2004
• infoblox dns one appliance Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier... CVE-2004-0606 6.8 MediumJune 30, 2004
• ircd-hybrid, ircd-ratbox +1 more Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and... CVE-2004-0605 Public exploit 5.0 MediumJune 30, 2004
• gift-fasttrack, gentoo linux +1 more The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a... CVE-2004-0604 5.0 MediumJune 30, 2004
• gnu gzip gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails... CVE-2004-0603 10.0 HighJune 30, 2004
• frees wan wan, openswan, strongswan +1 more +3 more FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x... CVE-2004-0590 10.0 HighJune 30, 2004
• gnu radius The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option,... CVE-2004-0576 5.0 MediumJune 30, 2004
• apache http server, avaya converged communications server, s8300 +4 more +6 more The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a... CVE-2004-0493 Public exploitFix available EPSS 84.8% 6.4 MediumJune 30, 2004
• ibm lotus notes Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to... CVE-2004-0480 10.0 HighJune 30, 2004
• inter7 sqwebmail Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and... CVE-2004-0591 Public exploitFix available 6.8 MediumJune 24, 2004
• isc dhcpd, infoblox dns one appliance, mandrakesoft mandrake linux +8 more +10 more The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that... CVE-2004-0461 EPSS 16.8% 10.0 HighJune 24, 2004
• isc dhcpd, infoblox dns one appliance, mandrakesoft mandrake linux +8 more +10 more Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and... CVE-2004-0460 EPSS 45.3% 10.0 HighJune 24, 2004
• vice Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local... CVE-2004-0453 Fix available 7.2 HighJune 24, 2004
• cisco ios Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing,... CVE-2004-0589 4.3 MediumJune 23, 2004
• usermin Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote... CVE-2004-0588 6.8 MediumJune 23, 2004
• suse linux, mandrakesoft mandrake linux, mandrake linux corporate server +1 more +3 more Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to... CVE-2004-0587 Fix available 2.1 LowJune 23, 2004
• ibm acprunner acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the (1)... CVE-2004-0586 10.0 HighJune 23, 2004
• horde imp Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a "security fix," does not properly... CVE-2004-0584 6.8 MediumJune 23, 2004
• usermin, webmin, debian linux +2 more The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse... CVE-2004-0583 Fix available 5.0 MediumJune 23, 2004
• webmin Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and... CVE-2004-0582 Fix available 5.0 MediumJune 23, 2004
• gnu ksymoops, mandrakesoft mandrake linux, mandrake linux corporate server +2 more ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local... CVE-2004-0581 4.6 MediumJune 23, 2004
• linksys befsr11, befsr41, befsr81 +9 more +11 more DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45... CVE-2004-0580 Public exploit 5.0 MediumJune 23, 2004
• conectiva linux, linux kernel, avaya converged communications server +13 more +15 more Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges... CVE-2004-0495 Fix available 7.2 HighJune 23, 2004
• apache http server, hp virtualvault, vvos +3 more +5 more Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote... CVE-2004-0492 Fix available EPSS 33.6% 10.0 HighJune 23, 2004
• subversion, openpkg +1 more libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3)... CVE-2004-0413 Fix available 10.0 HighJune 23, 2004
• sgi irix Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial... CVE-2004-0137 2.1 LowJune 23, 2004
• sgi irix The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial... CVE-2004-0136 2.1 LowJune 23, 2004
• sgi irix The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain... CVE-2004-0135 7.2 HighJune 23, 2004
• freebsd The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to... CVE-2004-0125 7.2 HighJune 23, 2004
• sun enterprise storage manager, storedge 3310 scsi array, storedge 3510 fc array +2 more Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and... CVE-2004-1345 7.2 HighJune 21, 2004
• sun solaris The Sun Solaris Volume Manager (SVM) on Solaris 9 allows local users to cause a denial of service... CVE-2004-1346 2.1 LowJune 19, 2004
• william deich super, debian linux +1 more Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as... CVE-2004-0579 Fix available 7.2 HighJune 19, 2004
• Show olderLoading…