CVEs published in August 2004
132 vulnerabilities, 15 critical, 0 exploited.
- ibm db2Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to...7.2 High
- No product listedMultiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute...7.2 High
- ibm db2 universal databaseIBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure...4.6 Medium
- ibm db2 universal databaseBuffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows...7.2 High
- luke mewburn lukemftp, tnftpd +1 moreMultiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote...5.1 Medium
- inter7 courier-imapFormat string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3...7.5 High
- php fusion fusionThe ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the...7.5 High
- microsoft ie, internet explorer, windows xp +15 more +17 moreInternet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote...5.0 Medium
- gnu cvsCVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the...5.0 Medium
- adobe acrobat, acrobat reader +1 moreBuffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader,...7.5 High
- sygate technologies enforcer, secure enterprise +1 moreSygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could...7.5 High
- sygate technologies secure enterpriseSygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data,...5.0 Medium
- sygate technologies enforcerSygate Enforcer 4.0 earlier allows remote attackers to cause a denial of service (service hang)...5.0 Medium
- clearswift mailsweeperClearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded...7.5 High
- clearswift mailsweeperClearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files,...7.5 High
- clearswift mailsweeperClearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files,...7.5 High
- port80 software servermaskServerMask 2.2 and earlier does not obfuscate (1) ETag, (2) HTTP Status Message, or (3) Allow...5.0 Medium
- kde, debian linux +1 moreKDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations,...7.1 High
- oracle mysqlThe mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql...4.6 Medium
- merak mail serverSQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers...7.5 High
- merak mail serverThe (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote...5.0 Medium
- merak mail serverThe (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote...5.0 Medium
- merak mail serverMultiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote...4.3 Medium
- pedestal software integrity protection driverThe ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local...2.1 Low
- andrew tridgell rsyncDirectory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and...6.4 Medium
- the cacti group cacti, gentoo linux +1 moreSQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute...7.5 High
- gvMultiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote...7.5 High
- powie pforumCross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject...6.8 Medium
- yukihiro matsumoto rubyThe FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates...2.1 Low
- qnx rtpFormat string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group...10.0 High
- firebirdsql firebird, mozilla firefox, mozilla +2 moreThe (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify...7.5 High
- adobe acrobat readerBuffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and...10.0 High
- adobe acrobat readerThe uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly...10.0 High
- apple mac os x, mac os x server +1 moreThe TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a...5.0 Medium
- apple mac os x, mac os x server +1 moreSafari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the...5.0 Medium
- aol instant messengerBuffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger ...10.0 High
- microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service...4.3 Medium
- clearswift mimesweeper for webDirectory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or...5.0 Medium
- iss blackice pc protection, blackice server protection +1 moreBlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3)...7.1 High
- hp process resource manager, workload manager +1 moreUnknown vulnerability in HP Process Resource Manager (PRM) C.02.01[.01] and earlier, as used by...2.1 Low
- No product listedX Display Manager (XDM) on Solaris 8 allows remote attackers to cause a denial of service (XDM...5.0 Medium
- gnu cfengineThe AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly...5.0 Medium
- gnu cfengineHeap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0...10.0 High
- No product listedCross-site scripting (XSS) vulnerability in TypePad allows remote attackers to inject arbitrary...4.3 Medium
- moodleCross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers...4.3 Medium
- andrew kilpatrick page cgipage.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the...7.5 High
- tsugio okamoto lhaBuffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute...10.0 High
- thomson speedtouchThomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions,...7.5 High
- avaya cvlan, redhat enterprise linux, enterprise linux desktop +1 more +3 moreMultiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote...7.5 High
- linux kernel, redhat fedora core, trustix secure linux +2 moreLinux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local...2.1 Low
- Show moreLoading…