https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-5116.htmlhttps://patchthecve.com/cve/CVE-2007-5116.htmlTue, 16 Jun 2026 22:45:28 +0000HIGH 7.5: Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.https://patchthecve.com/cve/CVE-2004-0990.htmlhttps://patchthecve.com/cve/CVE-2004-0990.htmlTue, 16 Jun 2026 22:06:48 +0000HIGH 10.0: Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngChttps://patchthecve.com/cve/CVE-2004-0957.htmlhttps://patchthecve.com/cve/CVE-2004-0957.htmlTue, 16 Jun 2026 22:06:44 +0000MEDIUM 6.8: Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.https://patchthecve.com/cve/CVE-2004-0940.htmlhttps://patchthecve.com/cve/CVE-2004-0940.htmlTue, 16 Jun 2026 22:06:42 +0000HIGH 7.8: Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.https://patchthecve.com/cve/CVE-2004-0918.htmlhttps://patchthecve.com/cve/CVE-2004-0918.htmlTue, 16 Jun 2026 22:06:39 +0000MEDIUM 5.0: The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.https://patchthecve.com/cve/CVE-2004-1065.htmlhttps://patchthecve.com/cve/CVE-2004-1065.htmlTue, 16 Jun 2026 22:06:56 +0000HIGH 10.0: Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.https://patchthecve.com/cve/CVE-2004-1019.htmlhttps://patchthecve.com/cve/CVE-2004-1019.htmlTue, 16 Jun 2026 22:06:51 +0000HIGH 10.0: The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" reshttps://patchthecve.com/cve/CVE-2004-1013.htmlhttps://patchthecve.com/cve/CVE-2004-1013.htmlTue, 16 Jun 2026 22:06:51 +0000HIGH 10.0: The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruphttps://patchthecve.com/cve/CVE-2004-1012.htmlhttps://patchthecve.com/cve/CVE-2004-1012.htmlTue, 16 Jun 2026 22:06:50 +0000HIGH 10.0: The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memorhttps://patchthecve.com/cve/CVE-2004-1011.htmlhttps://patchthecve.com/cve/CVE-2004-1011.htmlTue, 16 Jun 2026 22:06:50 +0000HIGH 10.0: Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.https://patchthecve.com/cve/CVE-2004-1471.htmlhttps://patchthecve.com/cve/CVE-2004-1471.htmlTue, 16 Jun 2026 22:07:46 +0000HIGH 7.1: Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.https://patchthecve.com/cve/CVE-2004-0333.htmlhttps://patchthecve.com/cve/CVE-2004-0333.htmlTue, 16 Jun 2026 22:05:24 +0000HIGH 10.0: Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.https://patchthecve.com/cve/CVE-2004-0772.htmlhttps://patchthecve.com/cve/CVE-2004-0772.htmlTue, 16 Jun 2026 22:06:20 +0000CRITICAL 9.8: Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.https://patchthecve.com/cve/CVE-2005-0373.htmlhttps://patchthecve.com/cve/CVE-2005-0373.htmlTue, 16 Jun 2026 22:10:59 +0000HIGH 7.5: Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.https://patchthecve.com/cve/CVE-2004-0421.htmlhttps://patchthecve.com/cve/CVE-2004-0421.htmlTue, 16 Jun 2026 22:05:36 +0000MEDIUM 5.0: The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.https://patchthecve.com/cve/CVE-2004-0418.htmlhttps://patchthecve.com/cve/CVE-2004-0418.htmlTue, 16 Jun 2026 22:05:36 +0000HIGH 10.0: serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.https://patchthecve.com/cve/CVE-2004-0417.htmlhttps://patchthecve.com/cve/CVE-2004-0417.htmlTue, 16 Jun 2026 22:05:36 +0000MEDIUM 5.0: Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.https://patchthecve.com/cve/CVE-2004-0416.htmlhttps://patchthecve.com/cve/CVE-2004-0416.htmlTue, 16 Jun 2026 22:05:35 +0000HIGH 10.0: Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.https://patchthecve.com/cve/CVE-2004-0414.htmlhttps://patchthecve.com/cve/CVE-2004-0414.htmlTue, 16 Jun 2026 22:05:35 +0000HIGH 10.0: CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.https://patchthecve.com/cve/CVE-2004-0413.htmlhttps://patchthecve.com/cve/CVE-2004-0413.htmlTue, 16 Jun 2026 22:05:35 +0000HIGH 10.0: libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffhttps://patchthecve.com/cve/CVE-2004-0594.htmlhttps://patchthecve.com/cve/CVE-2004-0594.htmlTue, 16 Jun 2026 22:05:56 +0000MEDIUM 5.1: The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a Hashttps://patchthecve.com/cve/CVE-2004-1997.htmlhttps://patchthecve.com/cve/CVE-2004-1997.htmlTue, 16 Jun 2026 22:08:47 +0000MEDIUM 4.6: Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.https://patchthecve.com/cve/CVE-2003-0615.htmlhttps://patchthecve.com/cve/CVE-2003-0615.htmlTue, 16 Jun 2026 22:02:31 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.https://patchthecve.com/cve/CVE-2003-0190.htmlhttps://patchthecve.com/cve/CVE-2003-0190.htmlTue, 16 Jun 2026 22:01:43 +0000MEDIUM 5.0: OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.https://patchthecve.com/cve/CVE-2003-0147.htmlhttps://patchthecve.com/cve/CVE-2003-0147.htmlTue, 16 Jun 2026 22:01:38 +0000MEDIUM 5.0: OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms (https://patchthecve.com/cve/CVE-2002-0985.htmlhttps://patchthecve.com/cve/CVE-2002-0985.htmlTue, 16 Jun 2026 21:58:30 +0000HIGH 7.5: Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands.https://patchthecve.com/cve/CVE-2002-0083.htmlhttps://patchthecve.com/cve/CVE-2002-0083.htmlTue, 16 Jun 2026 21:56:44 +0000CRITICAL 9.8: Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.