VYPR

CVEs

340,795 total · page 6609 of 6,816

AllCriticalHighKEV
  • CVE-2004-0491Dec 31, 2004
    Red Hat
    Enterprise Linux Server
    risk 0.00cvss —epss 0.00

    The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.

  • CVE-2004-0498Dec 31, 2004
    Stonesoft
    Firewall Engine
    risk 0.00cvss —epss 0.01

    The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service (crash) via crafted H.323 packets.

  • CVE-2004-0533Dec 31, 2004
    Businessobjects
    Webintelligence
    risk 0.00cvss —epss 0.00

    Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.

  • CVE-2004-0555Dec 31, 2004
    GNU
    Queue
    risk 0.00cvss —epss 0.03

    Buffer overflow in (1) queue.c and (2) queued.c in queue before 1.30.1 may allow remote attackers to execute arbitrary code.

  • CVE-2004-0560Dec 31, 2004
    University of Minnesota
    Gopherd
    risk 0.00cvss —epss 0.02

    Integer overflow in gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted content of a certain size that triggers the overflow.

  • CVE-2004-0561Dec 31, 2004
    University of Minnesota
    Gopherd
    risk 0.00cvss —epss 0.02

    Format string vulnerability in the log routine for gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.

  • CVE-2004-0567Dec 31, 2004
    Microsoft
    Windows Nt
    risk 0.05cvss —epss 0.25

    The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute…

  • CVE-2004-0592Dec 31, 2004
    SUSE S.A.
    Linux
    risk 0.00cvss —epss 0.01

    The tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that…

  • CVE-2004-0638Dec 31, 2004
    Oracle Corporation
    Database Server
    risk 0.01cvss —epss 0.17

    Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and 9.0.1.5, and 8i Release 1 8.1.7.4, allows remote authorized users to execute arbitrary code via a long…

  • CVE-2004-0780Dec 31, 2004
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Buffer overflow in uustat in Sun Solaris 8 and 9 allows local users to execute arbitrary code via a long -S command line argument.

  • CVE-2004-0789Dec 31, 2004
    Posadis
    Posadis
    risk 0.00cvss —epss 0.02

    Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU…

  • CVE-2004-0802Dec 31, 2004
    Enlightenment
    Imlib
    risk 0.01cvss —epss 0.06

    Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.

  • CVE-2004-0806Dec 31, 2004
    Cdrtools
    Cdrecord
    risk 0.03cvss —epss 0.01

    cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.

  • CVE-2004-0808Dec 31, 2004
    Samba (software)
    Samba
    risk 0.01cvss —epss 0.08

    The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.

  • CVE-2004-0811Dec 31, 2004
    Apache
    HTTP Server
    risk 0.00cvss —epss 0.04

    Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration.

  • CVE-2004-0813Dec 31, 2004
    Ide Cd
    Ide Cd
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations.

  • CVE-2004-0817Dec 31, 2004
    Enlightenment
    Imlib
    risk 0.00cvss —epss 0.04

    Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.

  • CVE-2004-0821Dec 31, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain privileges.

  • CVE-2004-0824Dec 31, 2004
    Apple Inc.
    Mac OS X
    risk 0.03cvss —epss 0.00

    PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDialer log files.

  • CVE-2004-0825Dec 31, 2004
    Apple Inc.
    Mac OS X Server
    risk 0.00cvss —epss 0.02

    QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service (application deadlock) via a certain sequence of operations.

  • CVE-2004-0826Dec 31, 2004
    Nss
    Network Security Services (nss)
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.

  • CVE-2004-0829Dec 31, 2004
    Samba (software)
    Samba
    risk 0.00cvss —epss 0.04

    smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2.

  • CVE-2004-0904Dec 31, 2004
    Mozilla Corporation
    Mozilla
    risk 0.03cvss —epss 0.37

    Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.

  • CVE-2004-0906Dec 31, 2004
    Mozilla Corporation
    Mozilla
    risk 0.00cvss —epss 0.00

    The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code.

  • CVE-2004-0907Dec 31, 2004
    Mozilla Corporation
    Mozilla
    risk 0.00cvss —epss 0.00

    The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code.

  • CVE-2004-0908Dec 31, 2004
    Mozilla Corporation
    Mozilla
    risk 0.00cvss —epss 0.06

    Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.

  • CVE-2004-0909Dec 31, 2004
    Mozilla Corporation
    Mozilla
    risk 0.01cvss —epss 0.07

    Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege…

  • CVE-2004-0913Dec 31, 2004
    Ecartis
    Ecartis
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in ecartis 0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8 allows attackers in the same domain to gain administrator privileges and modify configuration.

  • CVE-2004-0919Dec 31, 2004
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.00

    The syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via (1) negative coordinates or (2) large coordinates.

  • CVE-2004-0931Dec 31, 2004
    MySQL
    Maxdb
    risk 0.00cvss —epss 0.01

    MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function.

  • CVE-2004-0951Dec 31, 2004
    Microfocus
    Ignite UX
    risk 0.00cvss —epss 0.02

    The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information.

  • CVE-2004-0952Dec 31, 2004
    HPE
    HP-UX
    risk 0.00cvss —epss 0.02

    HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption.

  • CVE-2004-0979Dec 31, 2004
    Microsoft
    Internet Explorer
    risk 0.00cvss —epss 0.03

    Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.

  • CVE-2004-0984Dec 31, 2004
    GNU
    Mailutils
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges.

  • CVE-2004-0985Dec 31, 2004
    Microsoft
    Internet Explorer
    risk 0.03cvss —epss 0.41

    Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .ppt, and using ADODB.Connection and ADODB.recordset to write to a .hta file that…

  • CVE-2004-0997Dec 31, 2004
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the ptrace MIPS assembly code in Linux kernel 2.4 before 2.4.17 allows local users to gain privileges via unknown vectors.

  • CVE-2004-0999Dec 31, 2004
    Svgalib
    Zgv
    risk 0.00cvss —epss 0.01

    zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted multiple-image (animated) GIF images.

  • CVE-2004-1017Dec 31, 2004
    Linux
    Kernel
    risk 0.00cvss —epss 0.02

    Multiple "overflows" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors.

  • CVE-2004-1043Dec 31, 2004
    Microsoft
    Internet Explorer
    risk 0.09cvss —epss 0.74

    Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript…

  • CVE-2004-1049Dec 31, 2004
    Microsoft
    Windows
    risk 0.05cvss —epss 0.63

    Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling…

  • CVE-2004-1050Dec 31, 2004
    Microsoft
    Internet Explorer
    risk 0.10cvss —epss 0.82

    Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML…

  • CVE-2004-1104Dec 31, 2004
    Microsoft
    Ie
    risk 0.06cvss —epss 0.41

    Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute,…

  • CVE-2004-1140Dec 31, 2004
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.04

    Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp.

  • CVE-2004-1141Dec 31, 2004
    Ethereal Group
    Ethereal
    risk 0.00cvss —epss 0.04

    The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory.

  • CVE-2004-1143Dec 31, 2004
    Mailman
    Mailman
    risk 0.00cvss —epss 0.01

    The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.

  • CVE-2004-1144Dec 31, 2004
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges.

  • CVE-2004-1146Dec 31, 2004
    Cvstrac
    Cvstrac
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary HTML and web script.

  • CVE-2004-1150Dec 31, 2004
    Nullsoft
    Winamp
    risk 0.04cvss —epss 0.07

    Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.

  • CVE-2004-1155Dec 31, 2004
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.17

    Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window…

  • CVE-2004-1156Dec 31, 2004
    Mozilla Corporation
    Mozilla
    risk 0.00cvss —epss 0.01

    Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka…