| Max CVSS | 7.8 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2004-0971 | 2.1 |
The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
|
18-06-2021 - 15:15 | 09-02-2005 - 05:00 | |
| CVE-2017-8689 | 6.9 |
The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation
|
03-10-2019 - 00:03 | 13-10-2017 - 13:29 | |
| CVE-2004-0815 | 7.5 |
The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrar
|
30-10-2018 - 16:25 | 03-11-2004 - 05:00 | |
| CVE-2004-0967 | 7.2 |
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary fi
|
11-10-2017 - 01:29 | 09-02-2005 - 05:00 | |
| CVE-2004-0968 | 2.1 |
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.
|
11-10-2017 - 01:29 | 09-02-2005 - 05:00 | |
| CVE-2006-6951 | 6.8 |
Cross-site scripting (XSS) vulnerability in blog.php in OdysseusBlog allows remote attackers to inject arbitrary web script or HTML via the page parameter.
|
29-07-2017 - 01:29 | 23-01-2007 - 02:28 | |
| CVE-2004-1567 | 7.5 |
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2004-1563 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web script or HTML via the (1) thread parameter to download_thread.php, (2) loginuser parameter to login.php, or (3) userid parameter to
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2004-2452 | 5.0 |
Unknown vulnerability in Hitachi Cosminexus Portal Framework 01-00, 01-01, 01-02, 02-01, 02-02, 02-03, and other versions allows remote attackers to obtain sensitive information in the <ut:cache> tag library.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2004-1566 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2004-1564 | 5.0 |
CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2004-1562 | 7.5 |
SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL commands via the key parameter.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2004-0563 | 2.1 |
The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions, which could allow local users to gain sensitive information, such as a username and password.
|
11-07-2017 - 01:30 | 23-12-2004 - 05:00 | |
| CVE-2004-0970 | 2.1 |
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.
|
11-07-2017 - 01:30 | 09-02-2005 - 05:00 | |
| CVE-2004-0969 | 2.1 |
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
|
11-07-2017 - 01:30 | 09-02-2005 - 05:00 | |
| CVE-2004-0966 | 2.1 |
The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary file
|
11-07-2017 - 01:30 | 09-02-2005 - 05:00 | |
| CVE-2004-1565 | 5.0 |
list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter.
|
18-10-2016 - 02:56 | 31-12-2004 - 05:00 | |
| CVE-2000-0272 | 7.8 |
RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.
|
18-10-2016 - 02:06 | 20-04-2000 - 04:00 |