CVEs published September 24, 2004
37 CVEs were published on September 24, 2004: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 37
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 37
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 37
- CVE-2003-1014Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use…
- CVE-2003-1015Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use…
- CVE-2003-1016Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use…
- CVE-2004-0051Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use…
- CVE-2004-0052Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use…
- CVE-2004-0053Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use…
- CVE-2004-0161Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use…
- CVE-2004-0162Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that…
- CVE-2004-0559The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on…
- CVE-2004-0688Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4)…
- CVE-2004-0750Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions…
- CVE-2004-0787Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote…
- CVE-2004-0801Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute…
- CVE-2004-0802Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP…
- CVE-2004-0811Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to…
- CVE-2004-0813Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write…
- CVE-2004-0821The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain…
- CVE-2004-0822Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to…
- CVE-2004-0825QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service (application…
- CVE-2004-0827Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a…
- CVE-2004-0830The Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F-Secure Anti-Virus for Microsoft Exchange 6.01…
- CVE-2004-0831McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the…
- CVE-2004-0850Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain…
- CVE-2004-0867Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which…
- CVE-2004-0873Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program.
Show all 37 entriesShow fewer entries
- CVE-2004-0875Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to…
- CVE-2004-0880getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.
- CVE-2004-0881getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories…
- CVE-2004-0902Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow…
- CVE-2004-0903Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before…
- CVE-2004-0904Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before…
- CVE-2004-0905Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform…
- CVE-2004-0906The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure…
- CVE-2004-0907The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8…
- CVE-2004-0908Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and…
- CVE-2004-0909Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users…
- CVE-2004-0687Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c…