CVEs published in July 2004

132 vulnerabilities, 18 critical, 1 exploited.

• oracle application server, application server portal, database server lite +2 more +4 more The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix... CVE-2004-1707 Public exploit 7.2 HighJuly 30, 2004
• citadel ux Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of... CVE-2004-1705 Public exploit 5.0 MediumJuly 30, 2004
• wire plastic design wpquiz WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to... CVE-2004-1704 7.5 HighJuly 30, 2004
• fusionphp fusion news Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in... CVE-2004-1703 Public exploit 8.8 HighJuly 30, 2004
• jaws SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0... CVE-2004-2067 Public exploit 7.5 HighJuly 29, 2004
• linpha SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute... CVE-2004-2066 7.5 HighJuly 29, 2004
• verylost lostbook Cross-site scripting (XSS) vulnerability in lostBook 1.1 and earlier allows remote attackers to... CVE-2004-2064 Public exploit 4.3 MediumJuly 29, 2004
• risearch, risearch pro +1 more RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an... CVE-2004-2061 Public exploit 9.8 CriticalJuly 27, 2004
• hp hp-ux Buffer overflow in the DCE daemon (DCED) for the DCE endpoint mapper (epmap) on HP-UX 11 allows... CVE-2004-0716 EPSS 12.6% 10.0 HighJuly 27, 2004
• easyins PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote... CVE-2004-2053 Public exploit 7.5 HighJuly 24, 2004
• esesix thintune extreme, thintune l, thintune m +4 more +6 more The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows... CVE-2004-2051 5.0 MediumJuly 24, 2004
• easyweb filemanager Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote... CVE-2004-2047 Public exploit 5.0 MediumJuly 23, 2004
• sun java system calendar server Sun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain... CVE-2004-0742 10.0 HighJuly 23, 2004
• lionmax software www file share pro LionMax Software WWW File Share Pro 2.60 allows remote attackers to cause a denial of service ... CVE-2004-0741 5.0 MediumJuly 23, 2004
• lexmark t522 network printer The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a... CVE-2004-0740 Public exploit 5.0 MediumJuly 23, 2004
• snapfiles whisper ftp surfer Buffer overflow in Whisper FTP Surfer 1.0.7 allows remote FTP servers to cause a denial of... CVE-2004-0739 7.5 HighJuly 23, 2004
• francisco burzi php-nuke Multiple SQL injection vulnerabilities in the Search module in Php-Nuke allow remote attackers to... CVE-2004-0738 7.5 HighJuly 23, 2004
• francisco burzi php-nuke Multiple cross-site scripting vulnerabilities in index.php in the Search module for Php-Nuke... CVE-2004-0737 7.5 HighJuly 23, 2004
• francisco burzi php-nuke The search module in Php-Nuke allows remote attackers to gain sensitive information via the (1) "... CVE-2004-0736 5.0 MediumJuly 23, 2004
• electronic arts medal of honor allied assault Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b... CVE-2004-0735 Public exploit EPSS 62.1% 7.5 HighJuly 23, 2004
• extropia webstore Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in... CVE-2004-0734 Public exploit 7.5 HighJuly 23, 2004
• ollydbg Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service ... CVE-2004-0733 Public exploit 7.5 HighJuly 23, 2004
• francisco burzi php-nuke SQL injection vulnerability in index.php in the Search module for Php-Nuke allows remote... CVE-2004-0732 7.5 HighJuly 23, 2004
• francisco burzi php-nuke Cross-site scripting (XSS) vulnerability in index.php in the Search module for Php-Nuke allows... CVE-2004-0731 6.8 MediumJuly 23, 2004
• phpbb group phpbb Multiple cross-site scripting (XSS) vulnerabilities in PhpBB 2.0.8 allow remote attackers to... CVE-2004-0730 6.8 MediumJuly 23, 2004
• phpbb group phpbb PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid (1)... CVE-2004-0729 5.0 MediumJuly 23, 2004
• microsoft systems management server The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0... CVE-2004-0728 Public exploit EPSS 24.8% 5.0 MediumJuly 23, 2004
• microsoft internet explorer Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions... CVE-2004-0727 Public exploit EPSS 39.8% 7.5 HighJuly 23, 2004
• microsoft windows 2000 The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute... CVE-2004-0726 EPSS 11.4% 7.5 HighJuly 23, 2004
• moodle Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote... CVE-2004-0725 Public exploit 6.8 MediumJuly 23, 2004
• valve software half-life, half-life dedicated server +1 more The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service ... CVE-2004-0724 5.0 MediumJuly 23, 2004
• microsoft java virtual machine Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox... CVE-2004-0723 EPSS 13.0% 6.4 MediumJuly 23, 2004
• kde konqueror Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one... CVE-2004-0721 Fix available 7.5 HighJuly 23, 2004
• apple safari Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame... CVE-2004-0720 7.5 HighJuly 23, 2004
• microsoft internet explorer, ie +1 more Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions,... CVE-2004-0719 7.5 HighJuly 23, 2004
• firebirdsql firebird, mozilla, netscape navigator +2 more The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not... CVE-2004-0718 Fix available 7.5 HighJuly 23, 2004
• opera browser Opera 7.51 for Windows and 7.50 for Linux does not properly prevent a frame in one domain from... CVE-2004-0717 7.5 HighJuly 23, 2004
• samba, trustix secure linux +1 more Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash"... CVE-2004-0686 Fix available 5.0 MediumJuly 23, 2004
• samba, trustix secure linux +1 more Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote... CVE-2004-0600 Public exploitFix available EPSS 29.4% 10.0 HighJuly 23, 2004
• toplayer attack mitigator Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed... CVE-2004-1749 5.0 MediumJuly 22, 2004
• bea weblogic server The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2... CVE-2004-0715 5.1 MediumJuly 21, 2004
• cisco ios, ons 15454e optical transport platform, optical networking systems software +2 more Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited... CVE-2004-0714 5.0 MediumJuly 21, 2004
• bea weblogic server The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic... CVE-2004-0713 6.4 MediumJuly 21, 2004
• bea weblogic server The configuration tools (1) config.sh in Unix or (2) config.cmd in Windows for BEA WebLogic... CVE-2004-0712 4.6 MediumJuly 21, 2004
• bea weblogic server The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*... CVE-2004-0711 7.5 HighJuly 21, 2004
• cisco ios IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600... CVE-2004-0710 5.0 MediumJuly 21, 2004
• hp openview select access HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode... CVE-2004-0709 7.5 HighJuly 21, 2004
• moinmoin MoinMoin allows administrative access CVE-2004-0708 Fix available 7.5 HighJuly 21, 2004
• mozilla bugzilla SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2... CVE-2004-0707 7.5 HighJuly 21, 2004
• mozilla bugzilla Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users... CVE-2004-0706 2.1 LowJuly 21, 2004
• Show olderLoading…