Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

blog torrent previewDirectory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote...CVE-2004-1212Public exploit5.0 MediumDecember 15, 2004
david harris mercuryMultiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated...CVE-2004-1211Public exploitEPSS 72.5%10.0 HighDecember 15, 2004
ipcopCross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other...CVE-2004-1210Public exploit6.8 MediumDecember 15, 2004
verisign payflow linkVerisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the...CVE-2004-12095.0 MediumDecember 15, 2004
21-6 productions orbzBuffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service ...CVE-2004-1208Public exploit10.0 HighDecember 15, 2004
serioussam seriousengineThe Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro...CVE-2004-1207Public exploit5.0 MediumDecember 15, 2004
No product listedDirectory traversal vulnerability in codebrowserpntm.php in pnTresMailer 6.0.3 allows remote...CVE-2004-1206Public exploit5.0 MediumDecember 15, 2004
No product listedcodebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information...CVE-2004-12055.0 MediumDecember 15, 2004
fluxbox-team fluxbotFluxBox 0.9.10 and earlier versions allows local users to cause a denial of service (application...CVE-2004-1204Fix available2.1 LowDecember 15, 2004
phpcmsparser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote...CVE-2004-12035.0 MediumDecember 15, 2004
phpcmsCross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non...CVE-2004-12026.8 MediumDecember 15, 2004
opera browserOpera 7.54 allows remote attackers to cause a denial of service (application crash from memory...CVE-2004-12015.0 MediumDecember 15, 2004
mozilla firefoxFirefox and Mozilla allow remote attackers to cause a denial of service (application crash from...CVE-2004-12005.0 MediumDecember 15, 2004
apple safariSafari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application...CVE-2004-11995.0 MediumDecember 15, 2004
No product listedMicrosoft Internet Explorer allows remote attackers to cause a denial of service (application...CVE-2004-11985.0 MediumDecember 15, 2004
insite inshop, inmail +1 moreCross-site scripting (XSS) vulnerability in inshop.pl in Insite inShop allows remote attackers to...CVE-2004-11976.8 MediumDecember 15, 2004
insite inmail, inshop +1 moreCross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to...CVE-2004-1196Public exploit6.8 MediumDecember 15, 2004
lucasarts star wars battlefrontStar Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service ...CVE-2004-1195Public exploit5.0 MediumDecember 15, 2004
lucasarts star wars battlefrontBuffer overflow in Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a...CVE-2004-1194Public exploit5.0 MediumDecember 15, 2004
prevx homePrevx Home 1.0 allows local users with administrator privileges to bypass the intrusion...CVE-2004-11936.6 MediumDecember 15, 2004
citadel uxFormat string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote...CVE-2004-1192Public exploitEPSS 11.7%10.0 HighDecember 15, 2004
suse linuxRace condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more than 4GB of...CVE-2004-11911.2 LowDecember 15, 2004
suse linuxSUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands...CVE-2004-11902.1 LowDecember 15, 2004
microsoft internet explorerInternet Explorer 6 allows remote attackers to bypass the popup blocker via the document object...CVE-2004-1173EPSS 11.7%7.5 HighDecember 15, 2004
phpmyadminphpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to...CVE-2004-1148Fix available5.0 MediumDecember 15, 2004
phpmyadminphpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled,...CVE-2004-1147Public exploitFix availableEPSS 11.6%10.0 HighDecember 15, 2004
altlinux alt linux, conectiva linux, ethereal group ethereal +4 more +6 moreMultiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted...CVE-2004-11455.0 MediumDecember 15, 2004
ethereal group ethereal, altlinux alt linux, conectiva linux +4 more +6 moreEthereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU...CVE-2004-1142Fix available5.0 MediumDecember 15, 2004
ethereal group ethereal, altlinux alt linux, conectiva linux +4 more +6 moreUnknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote...CVE-2004-11395.0 MediumDecember 15, 2004
linux kernel, ubuntu linux +1 moreMultiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x...CVE-2004-1137Public exploitEPSS 20.8%10.0 HighDecember 15, 2004
enlightenment imlib, gentoo linux +1 moreMultiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and...CVE-2004-102510.0 HighDecember 15, 2004
kerio mailserver, serverfirewall, winroute firewall +2 moreKerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5,...CVE-2004-10232.1 LowDecember 15, 2004
kerio mailserver, serverfirewall, winroute firewall +2 moreKerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5...CVE-2004-10222.1 LowDecember 15, 2004
linux kernel, ubuntu linux +1 moreThe scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9...CVE-2004-1016Public exploit2.1 LowDecember 15, 2004
debian linux, zgv xzgv image viewer, image viewer +2 moreMultiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary...CVE-2004-0994Fix available10.0 HighDecember 15, 2004
microsoft windows 2000, windows 2003 server, windows 98 +4 more +6 moreMicrosoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly...CVE-2004-0901EPSS 31.9%10.0 HighDecember 15, 2004
microsoft windows ntThe DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not...CVE-2004-0900EPSS 26.0%10.0 HighDecember 15, 2004
microsoft windows ntThe DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with...CVE-2004-0899EPSS 72.6%5.0 MediumDecember 15, 2004
microsoft windows 2000, windows 2003 server, windows xp +2 moreLSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003...CVE-2004-0894Public exploit7.2 HighDecember 15, 2004
microsoft windows 2000, windows nt, windows xp +1 more +3 moreThe Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000,...CVE-2004-08937.2 HighDecember 15, 2004
microsoft windows 2000, windows 2003 server, windows 98 +4 more +6 moreMicrosoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which...CVE-2004-0571EPSS 30.9%10.0 HighDecember 15, 2004
microsoft windows 2000, windows nt, windows xp +1 more +3 moreHyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003...CVE-2004-0568EPSS 35.3%10.0 HighDecember 15, 2004
zgv image viewerzgv 5.5.3 allows remote attackers to cause a denial of service (application crash via...CVE-2004-09992.6 LowDecember 14, 2004
kde, mandrakesoft mandrake linux, redhat fedora core +2 moreKDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the...CVE-2004-11712.1 LowDecember 10, 2004
gnu a2ps, sun java desktop system, suse linux +2 morea2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the...CVE-2004-1170Public exploitFix availableEPSS 16.0%10.0 HighDecember 10, 2004
mysql maxdbMaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service ...CVE-2004-11695.0 MediumDecember 10, 2004
mysql maxdbStack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows...CVE-2004-116810.0 HighDecember 10, 2004
gentoo mirrorselectmirrorselect before 0.89 creates temporary files in a world-writable location with predictable...CVE-2004-11675.0 MediumDecember 10, 2004
microsoft ie, internet explorer +1 moreCRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows...CVE-2004-1166Public exploitEPSS 39.2%7.5 HighDecember 10, 2004
kde konqueror, kdelibs +1 moreKonqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that...CVE-2004-1165Public exploitFix available7.5 HighDecember 10, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open