CVEs published in December 2004
1,341 vulnerabilities, 159 critical, 1 exploited.
- cisco cns network registrarThe lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to...5.0 Medium
- cisco cns network registrarCisco CNS Network Registrar Central Configuration Management (CCM) server 6.0 through 6.1.1.3...5.0 Medium
- scponly, gentoo linux +1 moreThe unison command in scponly before 4.0 does not properly restrict programs that can be run,...7.5 High
- rssh, gentoo linux +1 morerssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow...7.5 High
- netscape navigatorNetscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web...7.5 High
- kde konqueror, mandrakesoft mandrake linux, redhat fedora core +2 moreKonqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof...7.5 High
- opera browserOpera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web...7.5 High
- mozilla firefox, mozilla +1 moreMozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web...4.3 Medium
- microsoft internet explorer, ie +1 moreInternet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by...7.5 High
- apple safariSafari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes,...7.5 High
- carnegie mellon university cyrus imap server, redhat fedora core, ubuntu linux +2 moreOff-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads...10.0 High
- mnogosearchMultiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow...4.3 Medium
- enlightenment imlib, gentoo linux +1 moreMultiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by...10.0 High
- gentoo linux, lesstif, redhat fedora core +1 more +3 moreMultiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages,...10.0 High
- linux kernel, ubuntu linux +1 moreMultiple buffer overflows in the (1) sys32_ni_syscall and (2) sys32_vm86_warning functions in...7.2 High
- globalscape cuteftpBuffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP...5.0 Medium
- ipswitch ws ftp serverMultiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a...5.0 Medium
- microsoft w3who.dllBuffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a...10.0 High
- microsoft w3who.dllMultiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow...6.8 Medium
- atari800, debian linux +1 moreMultiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4...7.2 High
- php, canonical ubuntu linux +1 moreThe safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before...10.0 High
- php, canonical ubuntu linux +1 morePHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix...10.0 High
- phpThe addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may...5.0 Medium
- php, canonical ubuntu linux +1 moreMultiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode...10.0 High
- dgen emulator, debian linux +1 moreromload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a...2.1 Low
- sgi irixUnknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and...10.0 High
- nfs nfs-utils, debian linux, mandrakesoft mandrake linux +3 more +5 morestatd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote...5.0 Medium
- sun solaris, sunos +1 moreUnknown vulnerability in the rwho daemon (in.rwhod) for Solaris 7 through 9 allows remote...10.0 High
- viewcvs, debian linux +1 moreMultiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar...5.0 Medium
- youngzsoft cmailserverCross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers...6.8 Medium
- youngzsoft cmailserverSQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp...10.0 High
- No product listedBuffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary...10.0 High
- open dc hub direct connect peer-to-peer clientBuffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to...10.0 High
- apple darwin streaming server, mac os x, mac os x server +1 more +3 moreDarwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a...5.0 Medium
- freebsdThe cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5...3.6 Low
- oracle mysql, suse linux +1 moreMySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via...5.0 Medium
- apple mac os x, darwin streaming server, mac os x server +1 more +3 moreApache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner,...7.5 High
- oracle oracle9iMultiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary...10.0 High
- hp sockdBuffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service ...10.0 High
- apple mac os x, darwin streaming server, mac os x server +1 more +3 moreUnknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and...4.6 Medium
- apple mac os x, darwin streaming server, mac os x server +1 more +3 morePostfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send...7.5 High
- apple mac os x, darwin streaming server, mac os x server +1 more +3 moreTerminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when...2.1 Low
- apple mac os x, darwin streaming server, mac os x server +1 more +3 moreBuffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute...7.5 High
- apple darwin streaming server, mac os x, mac os x server +1 more +3 moreHuman Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit...2.1 Low
- apple mac os x, darwin streaming server, mac os x server +1 more +3 moreApache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource...5.0 Medium
- apple mac os x, darwin streaming server, mac os x server +1 more +3 moreThe Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly...2.1 Low
- sun solaris, sunos +1 moreBuffer overflow in the ping daemon of Sun Solaris 7 through 9 may allow local users to execute...7.2 High
- prozilla download acceleratorMultiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles...10.0 High
- nullsoft winampStack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including...10.0 High
- weonlydo wodftpdlx activex componentBuffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by...10.0 High
- Show moreLoading…