VYPR

CVEs

378,283 total · page 7404 of 7,566

AllCriticalHighKEV
  • CVE-2004-0085Mar 3, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.02

    Unknown vulnerability in the Mail application for Mac OS X 10.1.5 and 10.2.8 with unknown impact, a different vulnerability than CVE-2004-0086.

  • CVE-2004-0086Mar 3, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085.

  • CVE-2004-0087Mar 3, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a different vulnerability than CVE-2004-0088.

  • CVE-2004-0088Mar 3, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    The System Configuration subsystem in Mac OS 10.2.8 allows local users to modify network settings, a different vulnerability than CVE-2004-0087.

  • CVE-2004-0089Mar 3, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    Buffer overflow in TruBlueEnvironment in Mac OS X 10.3.x and 10.2.x allows local users to gain privileges via a long environment variable.

  • CVE-2004-0092Mar 3, 2004
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact.

  • CVE-2004-0096Mar 3, 2004
    Apache
    Mod Python
    risk 0.00cvss —epss 0.04

    Unknown vulnerability in mod_python 2.7.9 allows remote attackers to cause a denial of service (httpd crash) via a certain query string, a variant of CAN-2003-0973.

  • CVE-2004-0097Mar 3, 2004
    PWLib
    PWLib
    risk 0.01cvss —epss 0.10

    Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

  • CVE-2004-0099Mar 3, 2004
    FreeBSD
    FreeBSD
    risk 0.00cvss —epss 0.00

    mksnap_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly disabling security-critical settings and allowing a local user to bypass intended access restrictions.

  • CVE-2004-0103Mar 3, 2004
    Crawl
    crawl
    risk 0.00cvss —epss 0.00

    crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow.

  • CVE-2004-0104Mar 3, 2004
    Metamail Corporation
    Metamail
    risk 0.05cvss —epss 0.26

    Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.

  • CVE-2004-0105Mar 3, 2004
    Metamail Corporation
    Metamail
    risk 0.01cvss —epss 0.08

    Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.

  • CVE-2004-0106Mar 3, 2004
    Xfree86
    Xfree86
    risk 0.00cvss —epss 0.00

    Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.

  • CVE-2004-0114Mar 3, 2004
    FreeBSD
    FreeBSD
    risk 0.03cvss —epss 0.01

    The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a shared memory segment's reference count when the vm_map_find function fails, which could allow local…

  • CVE-2004-0115Mar 3, 2004
    Microsoft
    Virtual Pc
    risk 0.00cvss —epss 0.02

    VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices_Log temporary file.

  • CVE-2004-0127Mar 3, 2004
    Phpgedview
    Phpgedview
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter.

  • CVE-2004-0128Mar 3, 2004
    Phpgedview
    Phpgedview
    risk 0.04cvss —epss 0.08

    PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains a malicious…

  • CVE-2004-0129Mar 3, 2004
    PhpMyAdmin
    phpMyAdmin
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter.

  • CVE-2004-0130Mar 3, 2004
    Phpgedview
    Phpgedview
    risk 0.00cvss —epss 0.02

    login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, which causes the information to be leaked in an error message.

  • CVE-2004-0131Mar 3, 2004
    GNU
    Radius
    risk 0.00cvss —epss 0.04

    The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null…

  • CVE-2004-0132Mar 3, 2004
    Visualshapers
    Ezcontents
    risk 0.03cvss —epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS[rootdp] parameter to db.php, or (2) the GLOBALS[language_home] parameter to…

  • CVE-2004-0143Mar 3, 2004
    Nokia
    6310i
    risk 0.00cvss —epss 0.03

    Multiple vulnerabilities in Nokia 6310(i) Mobile phones allow remote attackers to cause a denial of service (reset) via malformed Bluetooth OBject EXchange (OBEX) messages, probably triggering buffer overflows.

  • CVE-2004-0164Mar 3, 2004
    Kame
    Racoon
    risk 0.04cvss —epss 0.07

    KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in…

  • CVE-2004-1990Mar 3, 2004
    Aldostools
    Aldo\'s Web Server
    risk 0.00cvss —epss 0.03

    Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request.

  • CVE-2004-0944Feb 28, 2004
    Mitel
    Mitel 3300 Integrated Communication Platform
    risk 0.00cvss —epss 0.01

    The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie.

  • CVE-2004-1360Feb 27, 2004
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in conv_fix in Sun Solaris 7 through 9, when invoked by conv_lpd, allows local users to overwrite arbitrary files.

  • CVE-2004-0322Feb 23, 2004
    XMB
    XMB
    risk 0.03cvss —epss 0.05

    Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user parameter in editprofile.php, (4) an onmouseover…

  • CVE-2004-0324Feb 23, 2004
    Confirm
    Confirm
    risk 0.00cvss —epss 0.03

    Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", `, |, ;, or $.

  • CVE-2004-0466Feb 21, 2004
    Openconnect
    Webconnect
    risk 0.00cvss —epss 0.04

    WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (hang) via a URL containing an MS-DOS device name such as (1) AUX, (2) CON, (3) PRN, (4) COM1, or (5) LPT1.

  • CVE-2004-2136Feb 19, 2004
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    dm-crypt on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption.

  • CVE-2003-0700Feb 17, 2004
    Red Hat
    Kernel
    risk 0.00cvss —epss 0.02

    The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699.

  • CVE-2003-0819Feb 17, 2004
    Microsoft
    Internet Security And Acceleration Server
    risk 0.03cvss —epss 0.41

    Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225…

  • CVE-2003-0903Feb 17, 2004
    Microsoft
    Data Access Components
    risk 0.03cvss —epss 0.37

    Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.

  • CVE-2003-0924Feb 17, 2004
    Netpbm
    Netpbm
    risk 0.00cvss —epss 0.00

    netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.

  • CVE-2003-0965Feb 17, 2004
    Mailman
    Mailman
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities.

  • CVE-2003-0966Feb 17, 2004
    Elm Development Group
    Elm
    risk 0.00cvss —epss 0.03

    Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code via a long Subject line.

  • CVE-2003-0988Feb 17, 2004
    KDE
    Kde
    risk 0.00cvss —epss 0.06

    Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file.

  • CVE-2003-0989Feb 17, 2004
    Tcpdump
    Tcpdump
    risk 0.00cvss —epss 0.05

    tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.

  • CVE-2003-0992Feb 17, 2004
    Mailman
    Mailman
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users.

  • CVE-2003-1029Feb 17, 2004
    Tcpdump
    Tcpdump
    risk 0.04cvss —epss 0.10

    The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets.

  • CVE-2003-1030Feb 17, 2004
    Dameware Development
    Mini Remote Control Server
    risk 0.04cvss —epss 0.17

    Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a long pre-authentication request to TCP port 6129.

  • CVE-2003-1031Feb 17, 2004
    Jelsoft
    Vbulletin
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) "Interests-Hobbies", (2) "Biography", or (3) "Occupation."

  • CVE-2003-1032Feb 17, 2004
    risk 0.03cvss —epss 0.04

    Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (crash) via a malformed URL to the web server, possibly involving a buffer…

  • CVE-2004-0001Feb 17, 2004
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges.

  • CVE-2004-0004Feb 17, 2004
    Openca
    Openca
    risk 0.00cvss —epss 0.02

    The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signer's certificate and the one in the database, which can cause OpenCA to incorrectly accept a signature if the certificate's chain is trusted by OpenCA's chain…

  • CVE-2004-0049Feb 17, 2004
    RealNetworks
    Helix Universal Mobile Server And Gateway
    risk 0.00cvss —epss 0.01

    Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port.

  • CVE-2004-0054Feb 17, 2004
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.05

    Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

  • CVE-2004-0055Feb 17, 2004
    Tcpdump
    Tcpdump
    risk 0.00cvss —epss 0.04

    The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.

  • CVE-2004-0056Feb 17, 2004
    Nortel
    Business Communications Manager
    risk 0.00cvss —epss 0.04

    Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute…

  • CVE-2004-0057Feb 17, 2004
    Tcpdump
    Tcpdump
    risk 0.00cvss —epss 0.05

    The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different…