NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
71431 | CVE-2004-1031 | fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ. | 2 | 7.2 | High | 2017-07-18 | 2017-07-10 | View | |
71943 | CVE-2004-1564 | CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View | |
72199 | CVE-2004-1821 | SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database operations via the gid parameter. | 2 | 7.5 | High | 2017-07-18 | 2017-07-10 | View | |
72455 | CVE-2004-2078 | Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (reboot and loss of logged events) via a long request to TCP port 80, possibly triggering a buffer overflow. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View | |
72711 | CVE-2004-2334 | Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web script or HTML via (1) a hex-encoded value to the variable parameter in emumail.fcgi, (2) the folder parameter in emumail.fcgi, or Javascript in the (3) username or (4) password field in the login page. | 2 | 4.3 | Medium | 2017-07-18 | 2017-07-10 | View |
Page 45 of 17672, showing 5 records out of 88360 total, starting on record 221, ending on 225