VYPR

CVEs

378,344 total · page 7398 of 7,567

AllCriticalHighKEV
  • CVE-2004-0445Jul 7, 2004
    Symantec
    Norton Internet Security
    risk 0.04cvss —epss 0.11

    The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of…

  • CVE-2004-0459Jul 7, 2004
    Ieee
    802.11 Wireless Protocol
    risk 0.00cvss —epss 0.02

    The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy (aka "jabber"), which prevents devices from…

  • CVE-2004-0469Jul 7, 2004
    Checkpoint
    Firewall 1
    risk 0.00cvss —epss 0.05

    Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel…

  • CVE-2004-0470Jul 7, 2004
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.03

    BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, inadvertently removes security-role-assignment tags when weblogic.xml does not have a principal-name…

  • CVE-2004-0471Jul 7, 2004
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.00

    BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of service (service shutdown).

  • CVE-2004-0473Jul 7, 2004
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the "-f" option on Windows XP…

  • CVE-2004-0474Jul 7, 2004
    Microsoft
    Windows Xp
    risk 0.04cvss —epss 0.16

    Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.

  • CVE-2004-0475Jul 7, 2004
    Microsoft
    Ie
    risk 0.01cvss —epss 0.10

    The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash ("\\") before the target CHM file, as demonstrated using an "ms-its" URL to ntshared.chm. NOTE: this bug may overlap…

  • CVE-2004-0478Jul 7, 2004
    Mozilla Corporation
    Mozilla
    risk 0.00cvss —epss 0.01

    Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded…

  • CVE-2004-0479Jul 7, 2004
    Microsoft
    Ie
    risk 0.05cvss —epss 0.26

    Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference.

  • CVE-2004-0482Jul 7, 2004
    OpenBSD
    OpenBSD
    risk 0.00cvss —epss 0.00

    Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other…

  • CVE-2004-0483Jul 7, 2004
    Sgi
    Irix
    risk 0.00cvss —epss 0.02

    Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite loop) via certain RPC requests.

  • CVE-2004-0484Jul 7, 2004
    Microsoft
    Internet Explorer
    risk 0.05cvss —epss 0.22

    mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after the end of the table,…

  • CVE-2004-0485Jul 7, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume.

  • CVE-2004-0486Jul 7, 2004
    Apple Inc.
    Mac OS X
    risk 0.04cvss —epss 0.10

    HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a…

  • CVE-2004-0488Jul 7, 2004
    Apache
    mod_ssl
    risk 0.00cvss —epss 0.38

    Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.

  • CVE-2004-0489Jul 7, 2004
    Apple Inc.
    Mac OS X
    risk 0.01cvss —epss 0.07

    Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitrary code via the ProxyCommand option or (2) conduct port forwarding via the -R option.

  • CVE-2004-1345Jun 21, 2004
    Sun Corporation
    Enterprise Storage Manager
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local users with the "ESMUser" role to gain root access.

  • CVE-2004-1346Jun 19, 2004
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    The Sun Solaris Volume Manager (SVM) on Solaris 9 allows local users to cause a denial of service (kernel panic) via a malformed probe request to the SVM.

  • CVE-2004-1754Jun 15, 2004
    Symantec
    Gateway Security
    risk 0.03cvss —epss 0.03

    The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records.

  • CVE-2002-1580Jun 14, 2004
    Cyrus
    IMAP Server
    risk 0.04cvss —epss 0.17

    Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.

  • CVE-2003-1041Jun 14, 2004
    Microsoft
    Internet Explorer
    risk 0.07cvss —epss 0.53

    Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm…

  • CVE-2004-0038Jun 14, 2004
    McAfee
    Epolicy Orchestrator
    risk 0.00cvss —epss 0.03

    McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81.

  • CVE-2004-0050Jun 14, 2004
    Verity
    Ultraseek
    risk 0.00cvss —epss 0.01

    Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others.

  • CVE-2004-0154Jun 14, 2004
    NFS Utils
    nfs-utils
    risk 0.00cvss —epss 0.02

    rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.

  • CVE-2004-0199Jun 14, 2004
    Microsoft
    Windows Xp
    risk 0.02cvss —epss 0.26

    Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).

  • CVE-2004-0227Jun 14, 2004
    Zoneminder
    Zoneminder
    risk 0.00cvss —epss 0.03

    Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string.

  • CVE-2004-0392Jun 14, 2004
    Kame
    Racoon
    risk 0.00cvss —epss 0.02

    racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.

  • CVE-2004-0396Jun 14, 2004
    Nongnu
    Cvs
    risk 0.08cvss —epss 0.68

    Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.

  • CVE-2002-0385Jun 1, 2004
    Vignette
    Vignette
    risk 0.00cvss —epss 0.02

    Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"' (double quote) and and '>' characters, which causes the TCL interpreter to crash and include stack data in the output.

  • CVE-2003-0533Jun 1, 2004
    Microsoft
    Windows Nt
    risk 0.10cvss —epss 0.85

    Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote…

  • CVE-2003-0663Jun 1, 2004
    Microsoft
    Windows 2000
    risk 0.03cvss —epss 0.32

    Unknown vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows 2000 domain controllers allows remote attackers to cause a denial of service via a crafted LDAP message.

  • CVE-2003-0719Jun 1, 2004
    Microsoft
    Windows Nt
    risk 0.09cvss —epss 0.81

    Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute…

  • CVE-2003-0806Jun 1, 2004
    Microsoft
    Windows Nt
    risk 0.03cvss —epss 0.33

    Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code.

  • CVE-2003-0807Jun 1, 2004
    Microsoft
    Windows Nt
    risk 0.03cvss —epss 0.40

    Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.

  • CVE-2003-0906Jun 1, 2004
    Microsoft
    Windows Nt
    risk 0.02cvss —epss 0.25

    Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image.

  • CVE-2003-0907Jun 1, 2004
    Microsoft
    Windows Xp
    risk 0.02cvss —epss 0.22

    Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.

  • CVE-2003-0908Jun 1, 2004
    Microsoft
    Windows 2000
    risk 0.05cvss —epss 0.26

    The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using…

  • CVE-2003-0909Jun 1, 2004
    Microsoft
    Windows Xp
    risk 0.02cvss —epss 0.21

    Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability."

  • CVE-2003-0910Jun 1, 2004
    Microsoft
    Windows Nt
    risk 0.05cvss —epss 0.26

    The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points…

  • CVE-2004-0109Jun 1, 2004
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

  • CVE-2004-0116Jun 1, 2004
    Microsoft
    Windows 2000
    risk 0.03cvss —epss 0.38

    An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.

  • CVE-2004-0117Jun 1, 2004
    Microsoft
    Windows 2000
    risk 0.02cvss —epss 0.27

    Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code.

  • CVE-2004-0118Jun 1, 2004
    Microsoft
    Windows Nt
    risk 0.02cvss —epss 0.22

    The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.

  • CVE-2004-0119HigJun 1, 2004
    Microsoft
    Windows 2000
    risk 0.52cvss 7.5epss 0.40

    The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from null dereference) or execute arbitrary code via a crafted SPNEGO NegTokenInit request during…

  • CVE-2004-0120Jun 1, 2004
    Microsoft
    Windows 2000
    risk 0.07cvss —epss 0.51

    The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.

  • CVE-2004-0123Jun 1, 2004
    Microsoft
    Windows Nt
    risk 0.02cvss —epss 0.30

    Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code.

  • CVE-2004-0124Jun 1, 2004
    Microsoft
    Windows Nt
    risk 0.02cvss —epss 0.22

    The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."

  • CVE-2004-0133Jun 1, 2004
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device.

  • CVE-2004-0155Jun 1, 2004
    Kame
    Racoon
    risk 0.00cvss —epss 0.04

    The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid,…