2004

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the

Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel c

Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a d

Integer overflow in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial o

Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of ser

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported fi

Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify t

The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could a

FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call wi

Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow

The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure te

Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit

Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could

GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on l

The (1) inoregupdate, (2) uniftest, or (3) unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to over

Mailmgr 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/mailmgr.unsort, (2) /tmp/

Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service (segmentation fault) via

Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a larg

Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to access secr

WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local us

SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local user

Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local u

Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portio

The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Sec

MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multi

"Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98,

The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local us

The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before execu

rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain

The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a

OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow loc

The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permiss

The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local users

Opera allows remote attackers to cause a denial of service (invalid memory reference and application crash) via a web pa

Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows

gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are har

Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitra

sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbit

A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment vari

Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows lo

The (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to overwrite arbitrary fi

Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not proper

msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack

Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary fi

Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwr

A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to t

The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a denial of

Unknown vulnerability in HP Process Resource Manager (PRM) C.02.01[.01] and earlier, as used by HP-UX Workload Manager (

The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system cra

Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system pan