Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29929 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-0292 1 Karjasoft 1 Sami Http Server 2026-06-16 10.0 HIGH N/A
Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
CVE-2004-0291 1 Yabb 1 Yabb 2026-06-16 5.0 MEDIUM N/A
SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords via the quote parameter.
CVE-2004-0290 1 Freeform Interactive 2 Purge, Purge Jihad 2026-06-16 10.0 HIGH N/A
Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an information packet that contains large (1) battle type and (2) map name fields.
CVE-2004-0289 1 Paul L Daniels 1 Signaturedb 2026-06-16 2.1 LOW N/A
Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service (segmentation fault) via a database file that contains a large key parameter.
CVE-2004-0288 1 Mnogosearch 1 Mnogosearch 2026-06-16 10.0 HIGH N/A
Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document.
CVE-2004-0287 1 Xlight Ftp Server 1 Xlight Ftp Server 2026-06-16 5.0 MEDIUM N/A
Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a long argument containing a large number of / (slash) characters, possibly triggering a buffer overflow.
CVE-2004-0286 1 Robotftp 1 Robotftp Server 2026-06-16 10.0 HIGH N/A
Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long username.
CVE-2004-0284 1 Microsoft 3 Ie, Internet Explorer, Outlook 2026-06-16 5.0 MEDIUM N/A
Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name.
CVE-2004-0283 1 Mailmgr 1 Mailmgr 2026-06-16 2.1 LOW N/A
Mailmgr 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/mailmgr.unsort, (2) /tmp/mailmgr.tmp, or (3) /tmp/mailmgr.sort.
CVE-2004-0282 1 Crob 1 Crob Ftp Server 2026-06-16 5.0 MEDIUM N/A
Crob FTP daemon 3.5.2 allows remote attackers to cause a denial of service (crash) by repeatedly connecting to and disconnecting from the server.
CVE-2004-0281 1 Caucho 1 Resin 2026-06-16 5.0 MEDIUM N/A
Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows.
CVE-2004-0280 1 Caucho Technology 1 Resin 2026-06-16 5.0 MEDIUM N/A
Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded space character), e.g. index.jsp%20.
CVE-2004-0279 1 Aim Sniff 1 Aim Sniff 2026-06-16 7.2 HIGH N/A
AIM Sniff (aimSniff.pl) 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log.
CVE-2004-0278 1 Ratbag 5 Dirt Track Racing, Dirt Track Racing Australia, Dirt Track Racing Sprint Cars and 2 more 2026-06-16 5.0 MEDIUM N/A
Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data.
CVE-2004-0277 1 Bolintech 1 Dream Ftp Server 2026-06-16 10.0 HIGH N/A
Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the username.
CVE-2004-0275 1 Bosdev 1 Bosdates 2026-06-16 5.0 MEDIUM N/A
SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter.
CVE-2004-0274 1 Eggheads 1 Eggdrop Irc Bot 2026-06-16 7.5 HIGH N/A
Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is not a sharebot, which allows remote attackers to use STAT_OFFERED to promote a bot to a sharebot and conduct unauthorized activities.
CVE-2004-0272 1 Maxwebportal 1 Maxwebportal 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive information via the SendTo parameter in Personal Messages.
CVE-2004-0271 1 Maxwebportal 1 Maxwebportal 2026-06-16 6.8 MEDIUM N/A
Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web script as other users via (1) the sub_name parameter of dl_showall.asp, (2) the SendTo parameter in Personal Messages, (3) the HTTP_REFERER for down.asp, or (4) the image name of an Avatar in the register form.
CVE-2004-0270 1 Clam Anti-virus 1 Clamav 2026-06-16 5.0 MEDIUM N/A
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.