CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

• openbsd openssh sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection... CVE-2004-2760 Fix available 6.8 MediumDecember 31, 2004
• sun storedge qfs, storedge sam-qfs, storeedge performance suite +1 more +3 more Shared Sun StorEdge QFS and SAM-QFS file systems, as used in Utilization Suite 4.0 through 4.1... CVE-2004-2759 2.1 LowDecember 31, 2004
• sun sunforum Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2... CVE-2004-2758 7.5 HighDecember 31, 2004
• novell ichain Cross-site scripting (XSS) vulnerability in the failed login page in Novell iChain before 2.2... CVE-2004-2757 4.3 MediumDecember 31, 2004
• xoops Cross-site scripting (XSS) vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5,... CVE-2004-2756 Public exploit 4.3 MediumDecember 31, 2004
• symantec web security Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before... CVE-2004-2755 4.3 MediumDecember 31, 2004
• yabb se SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions... CVE-2004-2754 Public exploit 7.5 HighDecember 31, 2004
• hp hp-ux Unspecified vulnerability in SharedX in HP-UX B.11.00, B.11.11, and B.11.22 allows local users to... CVE-2004-2753 5.6 MediumDecember 31, 2004
• postnuke software foundation postnuke Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and... CVE-2004-2752 4.3 MediumDecember 31, 2004
• postnuke software foundation postnuke SQL injection vulnerability in the members_list module in PostNuke 0.726, and possibly earlier,... CVE-2004-2751 6.8 MediumDecember 31, 2004
• jbrowser Directory traversal vulnerability in browser.php in JBrowser 1.0 through 2.1 allows remote... CVE-2004-2750 Public exploit 5.0 MediumDecember 31, 2004
• 2wire homeportal Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in... CVE-2004-2749 Public exploit 4.3 MediumDecember 31, 2004
• webtrends reporting center viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers... CVE-2004-2748 Public exploit 4.3 MediumDecember 31, 2004
• pablo software solutions quick n easy ftp server Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and... CVE-2004-2747 4.0 MediumDecember 31, 2004
• pensacola web designs xtremeasp photogallery SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote... CVE-2004-2746 Public exploit 7.5 HighDecember 31, 2004
• anteco visual technologies ownserver Directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier allows... CVE-2004-2745 Public exploit 7.8 HighDecember 31, 2004
• phplist mailing list manager Unspecified vulnerability in Tincan Limited PHPlist before 2.8.12 has unknown impact and attack... CVE-2004-2744 5.0 MediumDecember 31, 2004
• raditha dissanayake mega upload progress bar upload.cgi in Mega Upload Progress Bar before 1.45 allows remote attackers to copy or overwrite... CVE-2004-2743 6.4 MediumDecember 31, 2004
• businessobjects crystal enterprise Cross-site scripting (XSS) vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and... CVE-2004-2742 4.3 MediumDecember 31, 2004
• horde application framework Cross-site scripting (XSS) vulnerability in the "help window" (help.php) in Horde Application... CVE-2004-2741 4.3 MediumDecember 31, 2004
• phprojekt PHP remote file inclusion vulnerability in authform.inc.php in PHProjekt 4.2.3 and earlier allows... CVE-2004-2740 4.3 MediumDecember 31, 2004
• phprojekt The setup routine (setup.php) in PHProjekt 4.2.1 and earlier allows remote attackers to modify... CVE-2004-2739 7.5 HighDecember 31, 2004
• zeroboard Cross-site scripting (XSS) vulnerability in check_user_id.php in ZeroBoard 4.1pl4 and earlier... CVE-2004-2738 4.3 MediumDecember 31, 2004
• netsupport dna helpdesk SQL injection vulnerability in problist.asp in NetSupport DNA HelpDesk 1.01 allows remote... CVE-2004-2737 Public exploit 7.5 HighDecember 31, 2004
• polar software helpdesk Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and... CVE-2004-2736 Public exploit 5.0 MediumDecember 31, 2004
• fredric fredricson p4db Cross-site scripting (XSS) vulnerability in P4DB 2.01 and earlier allows remote attackers to... CVE-2004-2735 4.3 MediumDecember 31, 2004
• novell netware webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with... CVE-2004-2734 10.0 HighDecember 31, 2004
• webwiz web wiz forums Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote... CVE-2004-2733 5.8 MediumDecember 31, 2004
• netbilling nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the... CVE-2004-2732 Public exploit 4.3 MediumDecember 31, 2004
• linux kernel Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux... CVE-2004-2731 4.4 MediumDecember 31, 2004
• microsoft psexec, psgetsid, psinfo +8 more +10 more Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3)... CVE-2004-2730 4.6 MediumDecember 31, 2004
• hummingbird connectivity Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute... CVE-2004-2729 4.4 MediumDecember 31, 2004
• hummingbird connectivity Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote,... CVE-2004-2728 3.5 LowDecember 31, 2004
• mailenable Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote... CVE-2004-2727 Public exploit 4.3 MediumDecember 31, 2004
• mailenable HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the... CVE-2004-2726 5.0 MediumDecember 31, 2004
• aztek forum forum Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to... CVE-2004-2725 Public exploit 4.3 MediumDecember 31, 2004
• lionmax software chat anywhere LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service (server... CVE-2004-2724 7.1 HighDecember 31, 2004
• nessus nessuswx NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users... CVE-2004-2723 2.1 LowDecember 31, 2004
• nessus ** DISPUTED ** Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which... CVE-2004-2722 Disputed 2.1 LowDecember 31, 2004
• heiko stamer openskat The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the "p"... CVE-2004-2721 4.3 MediumDecember 31, 2004
• snitz communications forums 2000 Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier... CVE-2004-2720 Public exploit 4.3 MediumDecember 31, 2004
• foxmail Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote... CVE-2004-2719 Public exploit 6.8 MediumDecember 31, 2004
• php heaven phpmychat PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers... CVE-2004-2718 Public exploit 4.3 MediumDecember 31, 2004
• php heaven phpmychat Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote... CVE-2004-2717 Public exploit 2.6 LowDecember 31, 2004
• php heaven phpmychat Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers... CVE-2004-2716 Public exploit 7.5 HighDecember 31, 2004
• php heaven phpmychat edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain... CVE-2004-2715 Public exploit 7.5 HighDecember 31, 2004
• windowmaker Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown... CVE-2004-2714 Fix available 6.0 MediumDecember 31, 2004
• zonelabs zonealarm ** DISPUTED ** Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to... CVE-2004-2713 Disputed 1.9 LowDecember 31, 2004
• phrozensmoke gyach enhanced Buffer overflow in Gyach Enhanced (Gyach-E) before 1.0.0-SneakPeek-3 allows remote attackers to... CVE-2004-2712 5.0 MediumDecember 31, 2004
• phrozensmoke gyach enhanced Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.2 allow remote attackers to... CVE-2004-2711 7.5 HighDecember 31, 2004
• Show olderLoading…