CVEs published in August 2004

132 vulnerabilities, 15 critical, 0 exploited.

• oracle application server, oracle10g +1 more Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in... CVE-2004-1774 Public exploit 7.2 HighAugust 31, 2004
• openbsd openssh The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote... CVE-2004-1653 EPSS 11.3% 6.4 MediumAugust 31, 2004
• brickhost phpscheduleit phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as... CVE-2004-1652 7.5 HighAugust 31, 2004
• brickhost phpscheduleit Multiple cross-site scripting (XSS) vulnerabilities in the registration page in phpScheduleIt 1.0... CVE-2004-1651 4.3 MediumAugust 31, 2004
• d-link dcs-900 internet camera D-Link DCS-900 Internet Camera listens on UDP port 62976 for an IP address, which allows remote... CVE-2004-1650 Public exploit 7.5 HighAugust 31, 2004
• microsoft windows 2000 Buffer overflow in Microsoft Msinfo32.exe might allow local users to execute arbitrary code via a... CVE-2004-1649 7.2 HighAugust 31, 2004
• web animations password protect Cross-site scripting (XSS) vulnerability in (1) index.asp, (2) ChangePassword.asp, (3) users_list... CVE-2004-1648 4.3 MediumAugust 31, 2004
• mit kerberos 5, debian linux, openpkg +2 more Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and... CVE-2004-0772 Fix available 9.8 CriticalAugust 31, 2004
• mit kerberos 5 The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2... CVE-2004-0644 Fix available 5.0 MediumAugust 31, 2004
• mit kerberos 5, debian linux, redhat enterprise linux desktop +2 more +4 more Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and... CVE-2004-0643 Fix available 4.6 MediumAugust 31, 2004
• mit kerberos 5, debian linux, redhat enterprise linux desktop +2 more +4 more Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key... CVE-2004-0642 Fix available 7.5 HighAugust 31, 2004
• cutephp cutenews PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to... CVE-2004-1660 7.5 HighAugust 30, 2004
• web animations password protect SQL injection vulnerability in Password Protect allows remote attackers to execute arbitrary SQL... CVE-2004-1647 Public exploit 7.5 HighAugust 30, 2004
• jerod moemeka xedus Directory traversal vulnerability in Xedus 1.0 allows remote attackers to read arbitrary files... CVE-2004-1646 Public exploit 5.0 MediumAugust 30, 2004
• jerod moemeka xedus Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute... CVE-2004-1645 Public exploit 4.3 MediumAugust 30, 2004
• jerod moemeka xedus Xedus 1.0 allows remote attackers to cause a denial of service (refuse connections) by connecting... CVE-2004-1644 5.0 MediumAugust 30, 2004
• progress ws ftp server WS_FTP 5.0.2 allows remote authenticated users to cause a denial of service (CPU consumption) via... CVE-2004-1643 Public exploit 5.0 MediumAugust 29, 2004
• texas imperial software wftpd WFTPD Pro Server 3.21 allows remote authenticated users to cause a denial of service (crash) via... CVE-2004-1642 Public exploit 5.0 MediumAugust 29, 2004
• south river technologies titan ftp server Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a... CVE-2004-1641 Public exploit 5.0 MediumAugust 29, 2004
• No product listed Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers... CVE-2004-1640 Public exploit 4.3 MediumAugust 28, 2004
• nullsoft winamp Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer... CVE-2004-0820 Public exploit 4.6 MediumAugust 28, 2004
• progress whatsup gold Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1... CVE-2004-0798 Public exploit EPSS 62.6% 7.5 HighAugust 27, 2004
• massive entertainment ground control ii operation exodus Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial... CVE-2004-1751 Public exploit 5.0 MediumAugust 26, 2004
• qnx photon microgui, rtp +1 more Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg... CVE-2004-1681 Public exploit 7.2 HighAugust 26, 2004
• No product listed YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request... CVE-2004-1662 5.0 MediumAugust 25, 2004
• openbsd The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging... CVE-2004-0819 5.0 MediumAugust 25, 2004
• trolltech qt The GIF parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of... CVE-2004-0693 Fix available 5.0 MediumAugust 25, 2004
• trolltech qt The XPM parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of... CVE-2004-0692 Fix available 5.0 MediumAugust 25, 2004
• trolltech qt Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3... CVE-2004-0691 Public exploitFix available EPSS 14.7% 7.5 HighAugust 25, 2004
• icecast Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast... CVE-2004-0781 Fix available 4.3 MediumAugust 25, 2004
• No product listed Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary... CVE-2004-1752 Public exploit 7.5 HighAugust 24, 2004
• people can fly painkiller Buffer overflow in Painkiller 1.3.1 and earlier allows remote attackers to cause a denial of... CVE-2004-1745 Public exploit 5.0 MediumAugust 24, 2004
• efs software web server Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU... CVE-2004-1744 Public exploit 5.0 MediumAugust 24, 2004
• efs software web server Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an... CVE-2004-1743 5.0 MediumAugust 24, 2004
• web-app.org webapp Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files... CVE-2004-1742 Public exploit 5.0 MediumAugust 24, 2004
• sun dtmail, solaris, avaya call management system server +1 more +3 more Format string vulnerability in CDE Mailer (dtmail) on Solaris 8 and 9 allows local users to gain... CVE-2004-0800 4.6 MediumAugust 24, 2004
• spamassassin SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via... CVE-2004-0796 Fix available 5.0 MediumAugust 24, 2004
• music daemon daemon Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service ... CVE-2004-1741 Public exploit 5.0 MediumAugust 23, 2004
• music daemon daemon Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by... CVE-2004-1740 5.0 MediumAugust 23, 2004
• bird chat internet chat server Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users. CVE-2004-1739 Public exploit 5.0 MediumAugust 23, 2004
• sympa Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier... CVE-2004-1735 Public exploitFix available 4.3 MediumAugust 21, 2004
• mydms Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered... CVE-2004-1733 5.0 MediumAugust 20, 2004
• mydms SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers... CVE-2004-1732 7.5 HighAugust 20, 2004
• mantis signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating... CVE-2004-1731 Public exploit 5.0 MediumAugust 20, 2004
• nihuo software web log analyzer Cross-site scripting (XSS) vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to... CVE-2004-1729 4.3 MediumAugust 20, 2004
• british national corpus sara Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute... CVE-2004-1728 Public exploit 7.5 HighAugust 20, 2004
• working resources inc. badblue BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a... CVE-2004-1727 Public exploit 5.0 MediumAugust 20, 2004
• john bradley xv Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote... CVE-2004-1726 7.5 HighAugust 20, 2004
• ibm db2 universal database DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin... CVE-2004-0795 7.2 HighAugust 20, 2004
• ibm db2, db2 universal database +1 more IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries... CVE-2003-1052 Public exploit 7.2 HighAugust 20, 2004
• Show olderLoading…