Vulnerability_Archives

CVE_ARCHIVES.DB

ARCHIVE_CHRONOLOGY.INDEXSTATUS: ONLINE

Risk_Filter:

Records: 2,479

Mode: SECURE_QUERY

CVE-2004-0090

HIGH

Unknown vulnerability in Windows File Sharing for Mac OS X 10.1.5 through 10.3.2 does not "shutdown properly," which has unknown impact and attack vec

Discovered

Dec 31, 2004

CVE-2004-0138

MEDIUM

The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted ELF file with an interpreter wi

Discovered

Dec 31, 2004

CVE-2004-0323

HIGH

Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the (1) ppp paramet

Discovered

Dec 31, 2004

CVE-2004-0325

LOW

TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arguments to (1) mkd, (2) xmkd, (

Discovered

Dec 31, 2004

CVE-2004-0369

HIGH

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security

Discovered

Dec 31, 2004

CVE-2004-0390

HIGH

SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to ga

Discovered

Dec 31, 2004

CVE-2004-0410

UNKNOWN

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed

Discovered

Dec 31, 2004

CVE-2004-0429

HIGH

Unknown vulnerability related to "the handling of large requests" in RAdmin for Apple Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attackers to have

Discovered

Dec 31, 2004

CVE-2004-0462

LOW

The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause th

Discovered

Dec 31, 2004

CVE-2004-0465

MEDIUM

Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys wit

Discovered

Dec 31, 2004

CVE-2004-0467

MEDIUM

Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packets, which

Discovered

Dec 31, 2004

CVE-2004-0491

LOW

The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong

Discovered

Dec 31, 2004

CVE-2004-0498

MEDIUM

The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service (crash) via crafted H.323

Discovered

Dec 31, 2004

CVE-2004-0499

UNKNOWN

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

Discovered

Dec 31, 2004

CVE-2004-0533

LOW

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete ar

Discovered

Dec 31, 2004

CVE-2004-0555

HIGH

Buffer overflow in (1) queue.c and (2) queued.c in queue before 1.30.1 may allow remote attackers to execute arbitrary code.

Discovered

Dec 31, 2004

CVE-2004-0560

HIGH

Integer overflow in gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted

Discovered

Dec 31, 2004

CVE-2004-0561

HIGH

Format string vulnerability in the log routine for gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly exe

Discovered

Dec 31, 2004

CVE-2004-0567

HIGH

The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows S

Discovered

Dec 31, 2004

CVE-2004-0592

MEDIUM

The tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, when using iptables and TCP option

Discovered

Dec 31, 2004

...