- EPSS 1.47%
- Veröffentlicht 01.03.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.
CVE-2004-1055
- EPSS 1.17%
- Veröffentlicht 01.03.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm ...
CVE-2005-0535
- EPSS 0.87%
- Veröffentlicht 22.02.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users.
CVE-2004-0937
- EPSS 13.2%
- Veröffentlicht 09.02.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the c...
- EPSS 12.79%
- Veröffentlicht 09.02.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames.
CVE-2004-0969
- EPSS 0.12%
- Veröffentlicht 09.02.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
CVE-2004-0972
- EPSS 0.08%
- Veröffentlicht 09.02.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
CVE-2004-0975
- EPSS 0.08%
- Veröffentlicht 09.02.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
- EPSS 1.58%
- Veröffentlicht 09.02.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code.
- EPSS 7.22%
- Veröffentlicht 09.02.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.