Skip to content

CVEs published in August 2004

132 vulnerabilities, 15 critical, 0 exploited.

datakey rainbow ikey2032 usb tokenDatakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt...CVE-2004-17092.1 LowAugust 4, 2004
jigunet twinftp enterprise, twinftp standard +1 moreDirectory traversal vulnerability in TwinFTP 1.0.3 R2 allows remote attackers to create arbitrary...CVE-2004-16795.0 MediumAugust 4, 2004
oracle application server, collaboration suite, database server +7 more +9 moreStack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary...CVE-2004-1371EPSS 10.8%9.0 HighAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreMultiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in...CVE-2004-13707.5 HighAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreThe TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener...CVE-2004-13695.0 MediumAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via...CVE-2004-13687.8 HighAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreOracle 10g Database Server, when installed with a password that contains an exclamation point ("!...CVE-2004-13674.4 MediumAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreOracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world...CVE-2004-1366EPSS 15.5%4.6 MediumAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreExtproc in Oracle 9i and 10g does not require authentication to load a library or execute a...CVE-2004-13654.6 MediumAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreDirectory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to...CVE-2004-1364Public exploitEPSS 13.9%8.5 HighAugust 4, 2004
oracle application server, collaboration suite, database server +4 more +6 moreBuffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via...CVE-2004-13639.8 CriticalAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreThe PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the...CVE-2004-13627.5 HighAugust 4, 2004
mozilla bugzillaBuffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in...CVE-2004-076910.0 HighAugust 4, 2004
ngsec stackdefenderNGSEC StackDefender 1.10 allows attackers to cause a denial of service (system crash) via an...CVE-2004-07675.0 MediumAugust 4, 2004
ngsec stackdefenderNGSEC StackDefender 2.0 allows attackers to cause a denial of service (system crash) via an...CVE-2004-07665.0 MediumAugust 4, 2004
greg roelofs libpng3libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow...CVE-2004-07687.5 HighAugust 4, 2004
greg roelofs libpngMultiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions...CVE-2004-0599Fix available5.0 MediumAugust 4, 2004
greg roelofs libpngThe png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a...CVE-2004-05985.0 MediumAugust 4, 2004
greg roelofs libpng, microsoft msn messenger, windows 98se +3 more +5 moreMultiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote...CVE-2004-0597Public exploitEPSS 81.9%10.0 HighAugust 4, 2004
mozilla firefox, mozilla, mozilla thunderbird +2 moreThe cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before...CVE-2004-07657.5 HighAugust 3, 2004
mozilla firefox, mozilla, mozilla thunderbird +2 moreMozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to...CVE-2004-076410.0 HighAugust 3, 2004
mozilla firefoxMozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web...CVE-2004-0763Public exploit5.0 MediumAugust 3, 2004
mozilla firefox, mozilla, mozilla thunderbird +2 moreMozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to...CVE-2004-07625.0 MediumAugust 3, 2004
mozilla firefox, mozilla, mozilla thunderbird +2 moreMozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use...CVE-2004-07615.0 MediumAugust 3, 2004
mozillaMozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than...CVE-2004-0760Public exploit6.4 MediumAugust 3, 2004
mozillaMozilla before 1.7 allows remote web servers to read arbitrary files via Javascript that sets the...CVE-2004-07596.4 MediumAugust 3, 2004
mozillaMozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as...CVE-2004-07585.0 MediumAugust 3, 2004
mozilla firefox, mozilla, mozilla thunderbird +2 moreHeap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox...CVE-2004-075710.0 HighAugust 3, 2004
mozilla, netscape navigator +1 moreInteger overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and ...CVE-2004-0722Public exploitEPSS 13.2%10.0 HighAugust 3, 2004
shawn webb webbsyte chatWebbsyte Chat 0.9.0 allows remote attackers to cause a denial of service (crash) via a large...CVE-2004-17085.0 MediumAugust 2, 2004
u.s.robotics usr808054The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of...CVE-2004-17067.5 HighAugust 2, 2004
sox, conectiva linux, redhat enterprise linux +2 more +4 moreMultiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17...CVE-2004-0557Public exploitFix availableEPSS 25.1%10.0 HighAugust 2, 2004