CVEs published in September 2004
145 vulnerabilities, 11 critical, 0 exploited.
- icewarp web mail, merak mail server +1 moreCross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7...4.3 Medium
- easyweb factory subjects moduleMultiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote...7.5 High
- sambasmbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash)...5.0 Medium
- apache http serverThe char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying...5.0 Medium
- apache http servermod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU...5.0 Medium
- tsugio okamoto lhaLHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell...10.0 High
- gearbox software halo combat evolvedOff-by-one error in Halo Combat Evolved 1.04 and earlier allows remote attackers to cause a...5.0 Medium
- f-secure anti-virus, content scanner server, internet gatekeeper +2 moreThe Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F...5.0 Medium
- ulrich callmeier net-acctThe (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to...2.1 Low
- openldap, apple mac os x, mac os x server +2 moreOpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other...7.5 High
- apple mac os x, mac os x server +1 moreBuffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8,...7.2 High
- sun solaris, sunos +1 moreUnknown vulnerability in in.named on Solaris 8 allows remote attackers to cause a denial of...5.0 Medium
- psnewsCross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to...4.3 Medium
- activision call of duty, call of duty united offensive +1 moreCall of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via...5.0 Medium
- brocade silkworm, engenio storage controller, ibm ds4100 +3 more +5 moreEngenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM...5.0 Medium
- sitecubed mailworks professionalMailWorks Professional allows remote attackers to bypass authentication and gain privileges via a...7.5 High
- cutephp cutenewsCross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote...4.3 Medium
- kerio personal firewallKerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass...4.6 Medium
- mozilla network security services, hp hp-ux, netscape certificate server +7 more +9 moreHeap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote...7.5 High
- rob flynn gaimMultiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service...7.5 High
- rob flynn gaimThe smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary...7.5 High
- rob flynn gaimInteger overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and...7.5 High
- oracle oracle8i, oracle9i +1 moreOracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with...6.5 Medium
- rob flynn gaim, gentoo linux, mandrakesoft mandrake linux +2 moreBuffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82...7.5 High
- newtelligence dasblogCross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence...4.3 Medium
- comersus open technologies cartCRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform...5.0 Medium
- phpwebsiteCross-site scripting (XSS) vulnerability in phpWebsite 0.9.3-4 and earlier allows remote...4.3 Medium
- phpwebsiteSQL injection vulnerability in the calendar module in phpWebsite 0.9.3-4 and earlier allows...7.5 High
- ibm db2 universal databaseMultiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute...7.2 High
- seattle lab software slmail proStack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows...10.0 High
- netscreen netscreen-sa 5000 seriesCross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running...6.0 Medium
- software602 602pro lan suiteLAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail...5.0 Medium
- ncipher nshieldUnknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows...2.1 Low
- zonelabs integrity, zonealarm +1 moreStack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm...10.0 High
- cisco optical networking systems softwareCisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows...5.0 Medium
- cisco optical networking systems softwareCisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS...5.0 Medium
- ipswitch imailBuffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10)...10.0 High
- monkey-project monkeyThe get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote...5.0 Medium
- eggheads eggdrop irc botShare.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED...7.5 High
- realnetworks realone enterprise desktop, realone player, realone desktop manager +2 moreDirectory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise...9.3 High
- clam anti-virus clamavlibclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via...5.0 Medium
- apache http serverPHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual...5.0 Medium
- openjournaloj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and...10.0 High
- netbsd, openbsd +1 moreOpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash)...5.0 Medium
- gnu libtoolGNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files...2.1 Low