Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
April

CVEs published in April 2004

140 vulnerabilities, 8 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

fastream netfile ftp web serverFastream NETFile FTP/Web Server 6.5.1.980 allows remote attackers to cause a denial of service...CVE-2004-19415.0 MediumApril 19, 2004
phorumSQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute...CVE-2004-1938Public exploit7.5 HighApril 19, 2004
xchatStack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5...CVE-2004-0409Public exploitFix available7.5 HighApril 17, 2004
macromedia coldfusionThe HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is...CVE-2004-04072.6 LowApril 17, 2004
realnetworks helix universal serverRealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of...CVE-2004-0389Public exploitEPSS 54.9%7.5 HighApril 17, 2004
gnu mailmanMailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email...CVE-2004-01825.0 MediumApril 17, 2004
linux kernelThe JFS file system code in Linux 2.4.x has an information leak in which in-memory data is...CVE-2004-01812.1 LowApril 17, 2004
linux kernelThe XFS file system code in Linux 2.4.x has an information leak in which in-memory data is...CVE-2004-01332.1 LowApril 17, 2004
kame racoonRacoon before 20040408a allows remote attackers to cause a denial of service (memory consumption)...CVE-2004-04035.0 MediumApril 16, 2004
cisco hosting solution engine, wireless lan solution engine +1 moreCisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7...CVE-2004-039110.0 HighApril 16, 2004
realnetworks realone player, realplayer +1 moreStack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne...CVE-2004-03875.1 MediumApril 16, 2004
oracle application server web cache, e-business suite +1 moreHeap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2...CVE-2004-0385EPSS 15.5%10.0 HighApril 16, 2004
microsoft jetBuffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary...CVE-2004-0197EPSS 26.3%7.5 HighApril 16, 2004
kame racoonThe KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509...CVE-2004-01557.5 HighApril 16, 2004
microsoft windows nt, windows 2000, windows 2003 server +1 more +3 moreThe DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote...CVE-2004-0124EPSS 22.0%2.6 LowApril 16, 2004
microsoft windows 2000, windows nt, windows xp +4 more +6 moreDouble free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows...CVE-2004-0123EPSS 29.7%7.5 HighApril 16, 2004
microsoft windows 2000, windows xp, windows 2003 server +2 moreThe Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and...CVE-2004-0120Public exploitEPSS 50.7%5.0 MediumApril 16, 2004
microsoft windows 2000, windows server 2003, windows xp +2 moreThe Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows...CVE-2004-0119EPSS 39.6%7.5 HighApril 16, 2004
microsoft windows 2000, windows nt +1 moreThe component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does...CVE-2004-0118EPSS 22.3%7.2 HighApril 16, 2004
microsoft windows 2000, windows 98, windows xp +3 more +5 moreUnknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows...CVE-2004-0117EPSS 26.5%7.5 HighApril 16, 2004
microsoft windows 2000, windows 2003 server, windows xp +2 moreAn Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows...CVE-2004-0116EPSS 37.6%5.0 MediumApril 16, 2004
microsoft windows 2000, windows nt +1 moreThe NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in...CVE-2003-0910Public exploitEPSS 26.1%7.2 HighApril 16, 2004
microsoft windows xpWindows XP allows local users to execute arbitrary programs by creating a task at an elevated...CVE-2003-0909EPSS 20.9%7.2 HighApril 16, 2004
microsoft windows 2000The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which...CVE-2003-0908Public exploitEPSS 25.9%7.2 HighApril 16, 2004
microsoft windows xp, windows server 2003 +1 moreHelp and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which...CVE-2003-0907EPSS 21.9%5.1 MediumApril 16, 2004
microsoft windows nt, windows 2000, windows xp +2 moreBuffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF)...CVE-2003-0906EPSS 25.2%7.6 HighApril 16, 2004
microsoft windows nt, windows 2000, windows 2003 server +1 more +3 moreBuffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for...CVE-2003-0807EPSS 39.7%5.0 MediumApril 16, 2004
microsoft windows nt, windows 2000, windows xp +2 moreBuffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000...CVE-2003-0806EPSS 33.1%7.5 HighApril 16, 2004
microsoft netmeeting, windows 98, windows me +4 more +6 moreBuffer overflow in the Private Communications Transport (PCT) protocol implementation in the...CVE-2003-0719Public exploitEPSS 81.2%7.5 HighApril 16, 2004
microsoft windows 2000Unknown vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows 2000...CVE-2003-0663EPSS 32.0%5.0 MediumApril 16, 2004
microsoft netmeeting, windows 98, windows me +4 more +6 moreStack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the...CVE-2003-0533Public exploitEPSS 85.6%7.5 HighApril 16, 2004
vignette, vignette storyserver +1 moreVignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a...CVE-2002-03855.0 MediumApril 16, 2004
cvsCVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in...CVE-2004-0405Fix available5.0 MediumApril 16, 2004
psionic logchecklogcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a...CVE-2004-0404Fix available1.2 LowApril 16, 2004
cvsThe client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files...CVE-2004-0180Fix available2.6 LowApril 16, 2004
webdav neon, debian linux +1 moreMultiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that...CVE-2004-0179Public exploitFix availableEPSS 11.1%6.8 MediumApril 16, 2004
sct corporation campus pipelineCross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject...CVE-2004-1935Public exploit4.3 MediumApril 15, 2004
isesam gemitelPHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to...CVE-2004-1934Public exploit7.5 HighApril 15, 2004
apache http serverDirectory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier,...CVE-2004-0173Public exploitEPSS 15.8%5.0 MediumApril 15, 2004
pythonBuffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is...CVE-2004-0150Fix available7.5 HighApril 15, 2004
microsoft msn messengerMicrosoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows...CVE-2004-0122EPSS 22.5%5.0 MediumApril 15, 2004
microsoft outlook, office +1 moreArgument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter...CVE-2004-0121Public exploitEPSS 47.7%7.5 HighApril 15, 2004
microsoft windows media servicesUnknown vulnerability in Windows Media Station Service and Windows Media Monitor Service...CVE-2003-0905EPSS 25.8%5.0 MediumApril 15, 2004
qualcomm eudoraEudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via...CVE-2004-1944Public exploit5.0 MediumApril 14, 2004
rhinosoft zaep antispamCross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject...CVE-2004-1939Public exploit4.3 MediumApril 14, 2004
zonelabs zonealarmZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail...CVE-2004-19367.5 HighApril 14, 2004
oracle mysqlThe mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink...CVE-2004-03882.1 LowApril 14, 2004
linux kernelThe OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in...CVE-2004-01782.1 LowApril 14, 2004
linux kernelThe ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks...CVE-2004-01775.0 MediumApril 14, 2004
xonixx11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail...CVE-2004-0157Fix available4.6 MediumApril 14, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open