2004

The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (CP

The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (socke

Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions all

The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sen

CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return

validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded_login parameter

Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute ar

04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inj

04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for

CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitti

Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable

Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service (application crash)

Format string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers t

Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (game interruption) via

Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) via

Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can

The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HTTP request to

Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (s

ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of servi

Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long

ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does

Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (ser

Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arbi

UploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache mod_mime, does not properly handle files with two

Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a

The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service (a

Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upl

The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could all

MyWebServer 1.0.3 allows remote attackers to cause a denial of service (application crash) via a large number of connect

Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long requ

CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response

list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involvin

Directory traversal vulnerability in ParaChat Server 5.5 allows remote attackers to read arbitrary files via a ..%5C (he

AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to (1) auto-acronyms.php, (2) aut

AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, whi

The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attrib

Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial o

index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which reveal

index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid ca

BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2)

CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting

Flash Messaging 5.2.0g (rev 1.1.2) and earlier allows remote attackers to cause a denial of service (application crash)

Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlier

Clientexec allows remote attackers to gain sensitive information via an HTTP request to phpinfo.php, which calls the php

The (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive in

Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.p

RealVNC 4.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of connections t

Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) vi

Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 all

A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of servi