Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
October

CVEs published in October 2004

142 vulnerabilities, 23 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input...CVE-2004-1381Public exploit5.0 MediumOctober 20, 2004
mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog...CVE-2004-1380Public exploit5.0 MediumOctober 20, 2004
postgresql, mandrakesoft mandrake linux, mandrake linux corporate server +3 more +5 moreThe make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite...CVE-2004-0977Fix available2.1 LowOctober 20, 2004
larry wall perlMultiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating...CVE-2004-0976Fix available2.1 LowOctober 20, 2004
gentoo linux, openssl, mandrakesoft mandrake linux +2 more +4 moreThe der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other...CVE-2004-0975Fix available2.1 LowOctober 20, 2004
mandrakesoft mandrake linux, mandrake linux corporate server, netatalk open source apple file share protocol suite +1 more +3 moreThe netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating...CVE-2004-0974Fix available2.1 LowOctober 20, 2004
gentoo linux, lvm logical volume management utilities +1 moreThe lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and...CVE-2004-0972Fix available2.1 LowOctober 20, 2004
mit kerberos 5The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1,...CVE-2004-0971Fix available2.1 LowOctober 20, 2004
gnu gzipThe (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages...CVE-2004-0970Fix available2.1 LowOctober 20, 2004
gentoo linux, gnu groff +1 moreThe groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux...CVE-2004-0969Fix available2.1 LowOctober 20, 2004
gnu glibc, redhat enterprise linux, enterprise linux desktop +2 moreThe catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a...CVE-2004-0968Fix available2.1 LowOctober 20, 2004
aladdin enterprises ghostscriptThe (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs...CVE-2004-0967Fix available7.2 HighOctober 20, 2004
gnu gettext, ubuntu linux +1 moreThe (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions,...CVE-2004-0966Fix available2.1 LowOctober 20, 2004
debian linux, zinf +1 moreBuffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote...CVE-2004-0964Public exploitFix availableEPSS 62.7%10.0 HighOctober 20, 2004
microsoft wordBuffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows...CVE-2004-0963EPSS 32.4%10.0 HighOctober 20, 2004
freeradius, redhat enterprise linux, fedora core +2 moreMemory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service ...CVE-2004-0961Fix available5.0 MediumOctober 20, 2004
freeradius, redhat enterprise linux, fedora core +2 moreFreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via...CVE-2004-0960Fix available5.0 MediumOctober 20, 2004
speedtouch usb driver, gentoo linux, mandrakesoft mandrake linux +2 more +4 moreFormat string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute...CVE-2004-08347.2 HighOctober 20, 2004
ncompressStack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used...CVE-2001-1413Fix available7.5 HighOctober 20, 2004
vypress tonecastVypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service ...CVE-2004-16185.0 MediumOctober 19, 2004
sun solaris, sunos +1 moreUnknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control (RBAC)...CVE-2004-13537.2 HighOctober 19, 2004
ibm lotus domino** DISPUTED ** NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS)...CVE-2004-1621Public exploitDisputed4.3 MediumOctober 18, 2004
university of kansas lynxLynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of...CVE-2004-1617Fix available5.0 MediumOctober 18, 2004
linksLinks allows remote attackers to cause a denial of service (memory consumption) via a web page or...CVE-2004-16165.0 MediumOctober 18, 2004
opera browserOpera allows remote attackers to cause a denial of service (invalid memory reference and...CVE-2004-16152.6 LowOctober 18, 2004
mozillaMozilla allows remote attackers to cause a denial of service (application crash from invalid...CVE-2004-16145.0 MediumOctober 18, 2004
mozilla, redhat enterprise linux, enterprise linux desktop +4 more +6 moreMozilla allows remote attackers to cause a denial of service (application crash from null...CVE-2004-16135.0 MediumOctober 18, 2004
saleslogix corporation saleslogixDirectory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary...CVE-2004-1612Public exploit5.0 MediumOctober 18, 2004
best software saleslogixSalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations,...CVE-2004-16115.1 MediumOctober 18, 2004
best software saleslogixSalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow...CVE-2004-16107.5 HighOctober 18, 2004
best software saleslogixSalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of...CVE-2004-16095.0 MediumOctober 18, 2004
best software saleslogixSQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL...CVE-2004-16087.5 HighOctober 18, 2004
best software saleslogixslxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1)...CVE-2004-16075.0 MediumOctober 18, 2004
best software saleslogixslxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash...CVE-2004-16066.4 MediumOctober 18, 2004
cpanelcPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files...CVE-2004-16035.5 MediumOctober 18, 2004
No product listedBuffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long ...CVE-2004-1638Public exploitEPSS 62.8%7.5 HighOctober 16, 2004
coolphp web portalDirectory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to...CVE-2004-1601Public exploit7.5 HighOctober 16, 2004
coolphpindex.php in CoolPHP 1.0-stable allows remote attackers to gain sensitive information via an...CVE-2004-16005.0 MediumOctober 16, 2004
coolphp coolphpweb portalCross-site scripting (XSS) vulnerability in index.php in CoolPHP 1.0-stable allows remote...CVE-2004-15994.3 MediumOctober 16, 2004
phprfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP...CVE-2004-09592.1 LowOctober 16, 2004
phpphp_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via...CVE-2004-0958Public exploit5.0 MediumOctober 16, 2004
freeradiusFreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by...CVE-2004-0938Fix available5.0 MediumOctober 16, 2004
apache http serverThe mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in...CVE-2004-0885Fix availableEPSS 15.4%7.5 HighOctober 16, 2004
microsoft excel, office +1 moreUnknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote...CVE-2004-0846EPSS 28.3%7.5 HighOctober 16, 2004
microsoft internet explorer, ie +1 moreInternet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote...CVE-2004-0845EPSS 31.0%6.4 MediumOctober 16, 2004
microsoft ieInternet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter...CVE-2004-0844EPSS 32.8%5.0 MediumOctober 16, 2004
microsoft internet explorer, ie +1 moreInternet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote...CVE-2004-0843EPSS 33.8%5.0 MediumOctober 16, 2004
microsoft exchange server, windows server 2003, windows xp +2 moreThe SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition,...CVE-2004-0840EPSS 30.2%10.0 HighOctober 16, 2004
realnetworks helix universal server, helix universal mobile server and gateway +1 moreRealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers...CVE-2004-07747.8 HighOctober 16, 2004
microsoft windows xp, windows 2003 server +1 moreInteger overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows...CVE-2004-0575Public exploitEPSS 60.3%10.0 HighOctober 16, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open