Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Internet Explorer Integer Overflow or WraparoundPatch nowKEVEPSS 38.48%Jul 30, 2004
- UnknownMicrosoft Internet Explorer showModalDialog Method VulnerabilityPatch nowKEVEPSS 61.06%Jul 30, 2004
- Medium6.8Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or HTML via the file parameter.Check if you run itEPSS 4.31%Jul 27, 2004
- High7.5Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing an…Check if you run itEPSS 1.26%Jul 27, 2004
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 7.21%Jul 14, 2004
- UnknownMicrosoft Internet Explorer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 52.61%Jul 13, 2004
- High7.5Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow re…Check this weekEPSS 37.68%Jul 7, 2004
- Critical9.8k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leCheck if you run itEPSS 7.16%Jul 7, 2004
- Low2.1The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.Check if you run itEPSS 0.56%Jun 1, 2004
- UnknownMicrosoft netmeeting Out-of-bounds WritePatch nowKEVEPSS 85.60%May 13, 2004
- Low2.1mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.Check if you run itEPSS 0.63%May 4, 2004
- High7.5Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (…Check this weekEPSS 11.55%May 4, 2004
- Medium4.3Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter.Check if you run itEPSS 1.99%Apr 30, 2004
- Medium5.0Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files…Check this weekEPSS 15.76%Apr 15, 2004
- High7.5Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in…Check if you run itEPSS 5.45%Apr 15, 2004
- Medium5.0Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests…Check this weekEPSS 11.01%Mar 29, 2004
- High7.5mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which…Check this weekEPSS 10.84%Mar 29, 2004
- Low2.1mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard disk, which could allow local users to gain sensit…Check if you run itEPSS 3.50%Mar 20, 2004
- High7.5mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.Check if you run itEPSS 5.56%Mar 3, 2004
- UnknownMicrosoft Outlook Express MHTML URL Processing VulnerabilityPatch nowKEVEPSS 63.25%Feb 13, 2004
- High7.5mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.Check if you run itEPSS 7.58%Feb 3, 2004
- UnknownBuffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code.Check if you run itEPSS 8.62%Feb 3, 2004
- UnknownMultiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings.Check if you run itEPSS 2.79%Jan 20, 2004
- Medium6.0Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users t…Check if you run itEPSS 8.12%Jan 20, 2004
- Medium4.3MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.Check if you run itEPSS 2.67%Dec 31, 2003
Sort