CVEs published in July 2004
132 vulnerabilities, 18 critical, 1 exploited.
- No product listedMultiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi...6.8 Medium
- No product listedUnknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6,...5.0 Medium
- mozilla bugzillaUnknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows...7.5 High
- mozilla bugzillaDBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the...5.0 Medium
- sun ray server softwareSun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a...4.6 Medium
- mod ssl ssl, gentoo linux +1 moreFormat string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in...7.5 High
- microsoft internet explorerInteger overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code...7.5 High
- microsoft internet explorer, outlook, windows 98 +5 more +7 moreDouble free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows...7.8 High
- phpbb group phpbbCross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote...4.3 Medium
- 4d webstar4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink...3.6 Low
- 4d webstarUnknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini...5.0 Medium
- 4d webstarThe ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list...5.0 Medium
- 4d webstarStack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote...7.5 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader 6.0 does not properly handle null characters when splitting a filename path into...7.5 High
- php, avaya converged communications server, integrated management +5 more +7 moreThe strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0)...6.8 Medium
- php, avaya converged communications server, debian linux +3 more +5 moreThe memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain...5.1 Medium
- linux kernelThe Equalizer Load-balancer for serial network interfaces (eql.c) in Linux kernel 2.6.x up to 2.6...2.1 Low
- microsoft outlook express, avaya definity one media server, ip600 media servers +2 more +4 moreMicrosoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application...5.0 Medium
- microsoft windows 2000Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with...7.8 High
- microsoft windows 2000, windows nt, avaya definity one media server +5 more +7 moreStack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer...10.0 High
- microsoft windows, windows 2000, windows nt +1 more +3 moreThe POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute...7.8 High
- microsoft internet information server, avaya definity one media server, ip600 media servers +2 more +4 moreBuffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute...7.2 High
- microsoft windows 98, avaya definity one media server, ip600 media servers +8 more +10 moreHeap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98...10.0 High
- ibm websphere caching proxy server, websphere edge server caching proxy +1 moreWebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite...5.0 Medium
- symantec norton antivirusSymantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU...5.0 Medium
- comersus open technologies cartcomersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098,...7.5 High
- comersus open technologies cartMultiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp,...6.8 Medium
- zoom model 5560 x3 ethernet adsl modemZoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML...10.0 High
- unreal unrealircdThe IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak...5.0 Medium
- 12planet chat serverCross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows...4.3 Medium
- fastream netfile ftp web serverFastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of...5.0 Medium
- fastream netfile ftp web serverDirectory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier...10.0 High
- mcmurtrey whitaker and associates cart32Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping...6.8 Medium
- enterasys xsr-1805, xsr-1850, xsr-3000 +2 moreEnterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based...5.0 Medium
- simm-comm sci photo chatCross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers...6.8 Medium
- netegrity identityminder, policy server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces...6.8 Medium
- symantec brightmail antispamBrightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from...5.0 Medium
- zyxel prestigePrestige 650HW-31 running Rompager 4.7 software allows remote attackers to cause a denial of...5.0 Medium
- ibm lotus dominoLotus Domino 6.5.0 and 6.5.1, with IMAP enabled, allows remote authenticated users to change...7.5 High
- No product listedWeb Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service (server...5.0 Medium
- rsbac rule set based access control, gentoo linux +1 moreRule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open,...7.2 High
- popclientOff-by-one error in the POP3_readmsg function in popclient 3.0b6 allows remote attackers to cause...7.5 High
- cgiscript.net csfaqcsFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database...5.0 Medium
- powerportalDirectory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to...5.0 Medium
- powerportalCross-site scripting (XSS) vulnerability in modules.php in PowerPortal 1.x allows remote...6.8 Medium
- powerportalPowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing...5.0 Medium
- d-link di-604, di-614\+, di-624 +2 moreInteger signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows...5.0 Medium
- cutephp cutenewsCross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and...6.8 Medium
- mplayerBuffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to...10.0 High
- linux kernelInteger overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in...7.2 High
- Show moreLoading…