2004

NetGear WG602 (aka WG602v1) Wireless Access Point firmware 1.04.0 and 1.5.67 has a hardcoded account of username "super"

NetGear WG602 (aka WG602v1) Wireless Access Point 1.7.14 has a hardcoded account of username "superman" and password "21

Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linu

Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript

AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering (1) invalid characters

phpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a direct request to (1) h

class.vfs_dav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for acce

The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which

phpGroupWare before 0.9.16.002 transmits the (1) header admin and (2) setup passwords in plaintext via cookies, which al

Novell iChain 2.3 allows attackers to cause a denial of service via a URL with a "specific string."

Novell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers, which allows remote atta

Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remo

login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a

Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote a

Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length h

Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (applica

Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows re

Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remo

Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaust

Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rul

Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state

The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped

SmartWebby Smart Guest Book stores SmartGuestBook.mdb (aka the "news database") under the web document root with insuffi

Directory traversal vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to read files outside of the

The MIMEH_read_headers function in ripMIME 1.3.1.0 does not properly handle trailing "\r" and "\n" characters in headers

Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers to

TinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL.

Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files

Unspecified vulnerability in Sun Fire 3800/4800/4810/6800, Sun Fire V1280, and Netra 1280 allows remote attackers to cau

The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service (unca

Free Web Chat 2.0 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections from t

The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cau

Soft3304 04WebServer before 1.41 does not properly check file names, which allows remote attackers to obtain sensitive i

Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource consumption or crash) vi

John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests t

Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_t

mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct requests, and certai

mod_python (libapache2-mod-python) 3.1.4 and earlier does not properly handle when output filters process more than 1638

Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain att

Unspecified vulnerability in Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to cause a denial of service

Gyach Enhanced (Gyach-E) before 1.0.0 stores passwords in plaintext, which allows attackers to obtain user passwords by

Buffer overflow in Gyach Enhanced (Gyach-E) before 1.0.0-SneakPeek-3 allows remote attackers to cause a denial of servic

HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which a

Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cooki

Unspecified vulnerability in Tincan Limited PHPlist before 2.8.12 has unknown impact and attack vectors, related to a "s

Directory traversal vulnerability in browser.php in JBrowser 1.0 through 2.1 allows remote attackers to read arbitrary f

The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted E

Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by trigger

Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service (memory c

Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport software in HP-UX B.11.00, B.11.04,