2004

The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows l

Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an inf

Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service

The Equalizer Load-balancer for serial network interfaces (eql.c) in Linux kernel 2.6.x up to 2.6.7 allows local users t

Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module

Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or the

Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token

4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack.

Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password i

The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall

Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a

Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascr

mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a ta

flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emac

The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack

The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count coun

BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for star

logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /

The Sun Solaris Volume Manager (SVM) on Solaris 9 allows local users to cause a denial of service (kernel panic) via a m

The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network

The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff fil

The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allo

The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the

The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not p

The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the

The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.

cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV c

Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files fo

The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IP

mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport tem

The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomi

Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (syste

Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service (

Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web sc

kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of se

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the

Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow lo

Microsoft Internet Explorer 5.5 and 6.0 allocates memory based on the memory size written in the BMP file instead of the

The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators

Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to re

mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard dis

The Vicam USB driver in Linux before 2.4.25 does not use the copy_from_user function when copying data from userspace to

The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a differen

The System Configuration subsystem in Mac OS 10.2.8 allows local users to modify network settings, a different vulnerabi

Unknown vulnerability in conv_fix in Sun Solaris 7 through 9, when invoked by conv_lpd, allows local users to overwrite

dm-crypt on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV com

netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.

Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink at

The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlin

Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a