Vulnerabilities > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2004-12-31 | CVE-2004-2371 | Remote Denial Of Service vulnerability in Redstorm Desert Siege, Ghost Recon and the SUM of ALL Fears Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service (hang) via packets that contain text strings with incorrect size values. | 5.0 |
2004-12-31 | CVE-2004-2369 | Directory Traversal vulnerability in IBM Lotus Domino 6.5.1 Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. | 6.4 |
2004-12-31 | CVE-2004-2367 | Remote Denial Of Service vulnerability in WFTPD Server GUI The Control Panel applet in WFTPD and WFTPD Pro 3.21 R1 and R2 allows remote authenticated users to cause a denial of service (crash) via a long FTP command. | 5.0 |
2004-12-31 | CVE-2004-2366 | Remote Buffer Overflow vulnerability in Globalscape Secure FTP Server 2.0Build20040311 Buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2 allows remote attackers to cause a denial of service (crash) via a SITE command with a long argument. | 5.0 |
2004-12-31 | CVE-2004-2361 | Remote Denial Of Service vulnerability in Digital Reality Game Engine Digital Reality game engine, as used in Haegemonia 1.0 through 1.0.7 and Desert Rats vs. | 5.0 |
2004-12-31 | CVE-2004-2360 | Remote Denial Of Service vulnerability in Targem Games Battle Mages 1.0 Targem Battle Mages 1.0 allows remote attackers to cause a denial of service (infinite loop) via a UDP packet with incomplete data, which causes the server to enter an infinite loop while waiting to read the rest of the data that is not sent. | 5.0 |
2004-12-31 | CVE-2004-2358 | Multiple vulnerability in PhpBB admin_words.php Cross-site scripting (XSS) vulnerability in admin_words.php for phpBB 2.0.6c allows remote attackers to inject arbitrary web script or HTML via the id parameter. network phpbb-group | 4.3 |
2004-12-31 | CVE-2004-2357 | Remote Security vulnerability in Proofpoint Protection Server The embedded MySQL 4.0 server for Proofpoint Protection Server does not require a password for the root user of MySQL, which allows remote attackers to read or modify the backend database. | 6.4 |
2004-12-31 | CVE-2004-2356 | Denial Of Service vulnerability in Fizmez web Server 1.0 Early termination vulnerability in Fizmez Web Server 1.0 allows remote attackers to cause a denial of service (crash) by connecting to the server and then disconnecting without sending any data, which triggers a null pointer dereference. | 5.0 |
2004-12-31 | CVE-2004-2355 | HTML Injection vulnerability in Crafty Syntax Live Help Crafty Syntax Live Help 2.7.3 Cross-site scripting (XSS) vulnerability in Crafty Syntax Live Help (CSLH) before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session. network crafty-syntax-live-help | 4.3 |