Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
September

CVEs published in September 2004

145 vulnerabilities, 11 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

enlightenment imlib, conectiva linux, enlightenment imlib2 +11 more +13 moreMultiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to...CVE-2004-0817Fix available7.5 HighSeptember 17, 2004
ipswitch whatsup goldThe HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause...CVE-2004-07995.0 MediumSeptember 17, 2004
apache http serverThe IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote...CVE-2004-0786Fix availableEPSS 24.1%5.0 MediumSeptember 17, 2004
apache http serverBuffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a ...CVE-2004-0747Fix available7.8 HighSeptember 17, 2004
microsoft office, word, works +2 more +4 moreBuffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office...CVE-2004-0573EPSS 42.3%7.5 HighSeptember 17, 2004
businessobjects infoview, webintelligence +1 moreCross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for...CVE-2004-05344.3 MediumSeptember 17, 2004
microsoft .net framework, digital image pro, digital image suite +21 more +23 moreBuffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus ...CVE-2004-0200Public exploitEPSS 49.0%9.3 HighSeptember 17, 2004
gnome gtk, gdkpixbuf +1 moreStack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4...CVE-2004-0783Fix available7.5 HighSeptember 17, 2004
todd miller sudosudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows...CVE-2004-1689Public exploitFix available2.1 LowSeptember 16, 2004
tech-noel pigeon serverPigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service ...CVE-2004-1688Public exploit5.0 MediumSeptember 16, 2004
snitz communications forums 2000CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to...CVE-2004-1687Public exploit5.0 MediumSeptember 16, 2004
xine, xine xine-lib +1 moreHeap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier...CVE-2004-1379Fix available7.5 HighSeptember 16, 2004
opera browserOpera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent...CVE-2004-08725.0 MediumSeptember 16, 2004
mozillaMozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being...CVE-2004-08715.0 MediumSeptember 16, 2004
kde konquerorKDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also...CVE-2004-08705.0 MediumSeptember 16, 2004
microsoft ieInternet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from...CVE-2004-0869EPSS 14.8%5.0 MediumSeptember 16, 2004
microsoft ie, internet explorer, kde konqueror +2 more +4 moreInternet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains,...CVE-2004-0866EPSS 10.1%7.5 HighSeptember 16, 2004
apache http server, debian linux, hp hp-ux +8 more +10 moreThe mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of...CVE-2004-0809Fix availableEPSS 17.2%5.0 MediumSeptember 16, 2004
conectiva linux, linuxprinting.org foomatic-filters, sun java desktop system +1 more +3 moreUnknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote...CVE-2004-0801Fix available7.5 HighSeptember 16, 2004
imagemagick, conectiva linux, enlightenment imlib +9 more +11 moreMultiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6...CVE-2004-0827Fix available7.5 HighSeptember 16, 2004
gnome gtk, gdkpixbuf +1 moreInteger overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2...CVE-2004-0788Fix available5.0 MediumSeptember 16, 2004
gnome gtk, gdkpixbuf +1 moreInteger overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 ...CVE-2004-0782Fix available7.5 HighSeptember 16, 2004
gnome gtk, gdkpixbuf +1 moreThe BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote...CVE-2004-0753Fix available5.0 MediumSeptember 16, 2004
microsoft ieInternet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar...CVE-2004-1686EPSS 10.3%5.0 MediumSeptember 15, 2004
smc networks smc7004vwbr, smc7008abr +1 moreSMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003...CVE-2004-16857.5 HighSeptember 15, 2004
easy software products cupsThe Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers...CVE-2004-0558Public exploitFix availableEPSS 26.8%5.0 MediumSeptember 15, 2004
mozilla firefox, mozilla, conectiva linux +5 more +7 moreMozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8...CVE-2004-09054.6 MediumSeptember 14, 2004
microsoft ie, internet explorer, avaya definity one media server +4 more +6 moreInternet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to...CVE-2004-0842Public exploitEPSS 56.6%7.5 HighSeptember 14, 2004
microsoft internet explorer, avaya definity one media server, ip600 media servers +4 more +6 moreInternet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events...CVE-2004-0841Public exploitEPSS 48.7%5.0 MediumSeptember 14, 2004
mcafee virusscanMcAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files...CVE-2004-08317.2 HighSeptember 14, 2004
sambaThe process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain...CVE-2004-0808Fix available5.0 MediumSeptember 14, 2004
cdrtools cdrecordcdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop...CVE-2004-0806Public exploit7.2 HighSeptember 14, 2004
zlibThe error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1...CVE-2004-0797Fix available2.1 LowSeptember 14, 2004
debian bsdmainutilsThe calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when...CVE-2004-0793Fix available7.2 HighSeptember 14, 2004
widcomm btstackserver, bluetooth communication software +1 moreBuffer overflow in WIDCOMM Bluetooth Connectivity Software, as used in products such as...CVE-2004-07757.5 HighSeptember 14, 2004
openofficeOpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during...CVE-2004-0752Fix available2.1 LowSeptember 14, 2004
kde, kde konqueror, gentoo linux +1 more +3 moreKonqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level...CVE-2004-07467.5 HighSeptember 14, 2004
checkpoint vpn-1, firewall-1 +1 moreHeap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when...CVE-2004-06997.5 HighSeptember 14, 2004
kdeThe DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a...CVE-2004-06904.6 MediumSeptember 14, 2004
usermin, mandrakesoft mandrake linux, mandrake linux corporate server +1 more +3 moreThe maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files...CVE-2004-0559Fix available2.1 LowSeptember 14, 2004
zyxel zynos, prestige +1 moreZyxel P681 running ZyNOS Vt020225a contains portions of memory in an ARP request, which allows...CVE-2004-16845.0 MediumSeptember 13, 2004
No product listedA race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying...CVE-2004-16833.7 LowSeptember 13, 2004
pingtel xpressaapplication.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote...CVE-2004-16805.0 MediumSeptember 13, 2004
logicnow perldeskDirectory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read...CVE-2004-1678Public exploit5.0 MediumSeptember 13, 2004
lexar jumpdrive secureLexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR...CVE-2004-08382.1 LowSeptember 13, 2004
samba, conectiva linux, mandrakesoft mandrake linux +2 moreSamba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and...CVE-2004-0807Fix available5.0 MediumSeptember 13, 2004
logicnow perldeskpdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang...CVE-2004-16775.0 MediumSeptember 12, 2004
gadu-gadu instant messengerHeap-based buffer overflow in the image sending feature in Gadu-Gadu 6.0 build 149 allows remote...CVE-2004-16767.5 HighSeptember 12, 2004
solarwinds serv-u file serverServ-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application...CVE-2004-1675Public exploitEPSS 12.4%5.0 MediumSeptember 11, 2004
icewarp web mail, merak mail server +1 moreMultiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7,...CVE-2004-16707.5 HighSeptember 10, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open