|
306821
|
6.1 |
MEDIUM
Network
|
broadcom
|
symantec_siteminder
|
A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The man…
|
CWE-601
Open Redirect
|
CVE-2005-10001
|
2024-11-21 08:56 |
2022-03-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306822
|
9.8 |
CRITICAL
Network
|
goscript_project
|
goscript
|
go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) query string or (2) artarchive parameter.
|
NVD-CWE-Other
|
CVE-2004-2776
|
2024-11-21 08:54 |
2020-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306823
|
7.5 |
HIGH
Network
|
underbit
|
libid3tag
|
id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition…
|
CWE-399
Resource Management Errors
|
CVE-2004-2779
|
2024-11-21 08:54 |
2018-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306824
|
7.1 |
HIGH
Local
|
gentoo
|
portage
|
Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted comm…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2004-2778
|
2024-11-21 08:54 |
2017-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306825
|
- |
|
gehealthcare
|
centricity_image_vault_firmware
|
GE Healthcare Centricity Image Vault 3.x has a password of (1) gemnet for the administrator account, (2) webadmin for the webadmin administrator account of the ASACA DVD library, (3) an empty value f…
|
CWE-255
Credentials Management
|
CVE-2004-2777
|
2024-11-21 08:54 |
2015-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306826
|
- |
|
oracle
redhat
bsd_mailx_project
heirloom
|
linux
enterprise_linux
bsd_mailx
mailx
|
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
|
CWE-20
Improper Input Validation
|
CVE-2004-2771
|
2024-11-21 08:54 |
2014-12-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306827
|
- |
|
cerberusftp
|
ftp_server
|
Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) MLSD or (2) MLST commands.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2004-2769
|
2024-11-21 08:54 |
2010-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306828
|
- |
|
tsugio_okamoto
|
lha
|
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a di…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2004-0694
|
2024-11-21 08:49 |
2011-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306829
|
6.1 |
MEDIUM
Network
|
ibm
|
iss_blackice_pc_protection
|
A vulnerability was found in ISS BlackICE PC Protection. It has been rated as problematic. Affected by this issue is the Update Handler. The manipulation with an unknown input leads to cross site scr…
|
CWE-79
Cross-site Scripting
|
CVE-2003-5003
|
2024-11-21 08:47 |
2022-03-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306830
|
5.3 |
MEDIUM
Network
|
ibm
|
iss_blackice_pc_protection
|
A vulnerability was found in ISS BlackICE PC Protection. It has been declared as problematic. Affected by this vulnerability is the component Update Handler which allows cleartext transmission of dat…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2003-5002
|
2024-11-21 08:47 |
2022-03-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
