Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

posadis, axis 2100 network camera, 2110 network camera +12 more +14 moreMultiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by...CVE-2004-0789Public exploit5.0 MediumDecember 31, 2004
sun solaris, sunos +1 moreBuffer overflow in uustat in Sun Solaris 8 and 9 allows local users to execute arbitrary code via...CVE-2004-07807.2 HighDecember 31, 2004
oracle oracle8i, oracle9i +1 moreBuffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for...CVE-2004-06388.5 HighDecember 31, 2004
suse linuxThe tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel...CVE-2004-05925.0 MediumDecember 31, 2004
microsoft windows 2000, windows nt, windows 2003 server +2 moreThe Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0...CVE-2004-0567Public exploitEPSS 68.7%7.5 HighDecember 31, 2004
university of minnesota gopherdFormat string vulnerability in the log routine for gopher daemon (gopherd) 3.0.3 allows remote...CVE-2004-0561Fix available7.5 HighDecember 31, 2004
university of minnesota gopherdInteger overflow in gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of...CVE-2004-0560Fix available7.5 HighDecember 31, 2004
gnu queueBuffer overflow in (1) queue.c and (2) queued.c in queue before 1.30.1 may allow remote attackers...CVE-2004-0555Fix available7.5 HighDecember 31, 2004
businessobjects infoview, webintelligence +1 moreBusiness Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client,...CVE-2004-05332.1 LowDecember 31, 2004
stonesoft firewall engineThe H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers...CVE-2004-04985.0 MediumDecember 31, 2004
redhat enterprise linuxThe linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock...CVE-2004-04912.1 LowDecember 31, 2004
juniper junosJuniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing...CVE-2004-04675.0 MediumDecember 31, 2004
openconnect webconnectDirectory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly...CVE-2004-0465Public exploitEPSS 12.3%5.0 MediumDecember 31, 2004
No product listedThe built-in web servers for multiple networking devices do not set the Secure attribute for...CVE-2004-04622.1 LowDecember 31, 2004
apple mac os xUnknown vulnerability related to "the handling of large requests" in RAdmin for Apple Mac OS X 10...CVE-2004-042910.0 HighDecember 31, 2004
sco openserverSCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log...CVE-2004-0390Public exploit7.5 HighDecember 31, 2004
entrust libkmp isakmp library, symantec enterprise firewall, gateway security 5300 +2 more +4 moreBuffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0...CVE-2004-03697.5 HighDecember 31, 2004
linux kernelThe ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service ...CVE-2004-01384.9 MediumDecember 31, 2004
apple mac os x, mac os x server +1 moreUnknown vulnerability in Windows File Sharing for Mac OS X 10.1.5 through 10.3.2 does not ...CVE-2004-009010.0 HighDecember 31, 2004
microsoft internet explorerDirectory traversal vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote...CVE-2004-13765.0 MediumDecember 30, 2004
mozillaHeap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and...CVE-2004-13165.0 MediumDecember 29, 2004
viewcvsMultiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to...CVE-2004-10624.3 MediumDecember 28, 2004
gnu a2ps, turbolinux home, server +1 more +3 moreThe (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow...CVE-2004-1377Fix available2.1 LowDecember 27, 2004
No product listedStack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e...CVE-2004-1317Public exploitEPSS 59.5%7.5 HighDecember 27, 2004
phpbb group phpbbMultiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote...CVE-2004-2130Public exploit4.3 MediumDecember 23, 2004
hp hp-uxUnknown vulnerability in System Administration Manager (SAM) in HP-UX B.11.00, B.11.11, B.11.22,...CVE-2004-13754.6 MediumDecember 23, 2004
nullsoft shoutcast serverFormat string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of...CVE-2004-1373Public exploitEPSS 70.1%7.5 HighDecember 23, 2004
microsoft windows 2000, windows nt, windows xp +1 more +3 moreInteger underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2...CVE-2004-1361EPSS 20.0%5.0 MediumDecember 23, 2004
oracle database server, oracle9i +1 moreSQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS...CVE-2004-13396.5 MediumDecember 23, 2004
oracle database server, oracle9i +1 moreThe triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of...CVE-2004-13386.5 MediumDecember 23, 2004
conectiva linux, gnu realtime linux security module +1 moreThe POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle...CVE-2004-13377.2 HighDecember 23, 2004
debian tetex-bin, gentoo linux +1 moreThe xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names,...CVE-2004-13362.1 LowDecember 23, 2004
microsoft windows 2000, windows nt, windows xp +16 more +18 moreThe Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP...CVE-2004-1305Public exploitEPSS 58.6%5.0 MediumDecember 23, 2004
telnetd, telnetd telnetd-ssl +1 moreFormat string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute...CVE-2004-0998Fix available7.5 HighDecember 23, 2004
sybase adaptive server enterpriseMultiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5...CVE-2005-044110.0 HighDecember 22, 2004
tcpThe original design of ICMP does not require authentication for host-generated ICMP error...CVE-2005-0068EPSS 54.4%5.0 MediumDecember 22, 2004
tcpThe original design of TCP does not require that port numbers be assigned randomly (aka "Port...CVE-2005-0067EPSS 13.5%5.0 MediumDecember 22, 2004
tcpThe original design of TCP does not check that the TCP Acknowledgement number in an ICMP error...CVE-2005-0066EPSS 10.7%5.0 MediumDecember 22, 2004
skypeSkype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype...CVE-2004-17784.6 MediumDecember 22, 2004
apple safariSafari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one...CVE-2004-13147.5 HighDecember 22, 2004
webroot software my firewall plusThe Smc.exe process in My Firewall Plus 5.0 build 1117, and possibly other versions, does not...CVE-2004-13137.2 HighDecember 22, 2004
mplayerInteger overflow in the real_setup_and_get_header function in real.c for Unix MPlayer 1.0pre5...CVE-2004-1311Fix available10.0 HighDecember 22, 2004
mplayerStack-based buffer overflow in the asf_mmst_streaming.c functionality for MPlayer 1.0pre5 allows...CVE-2004-1310Fix available10.0 HighDecember 22, 2004
mplayer unix mplayerHeap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5...CVE-2004-1309Fix available10.0 HighDecember 22, 2004
libtiffInteger overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows...CVE-2004-1308Fix availableEPSS 15.0%10.0 HighDecember 22, 2004
file, gentoo linux, trustix secure linux +2 moreStack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers...CVE-2004-1304Public exploitFix availableEPSS 11.4%10.0 HighDecember 22, 2004
yanfBuffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to...CVE-2004-1303Public exploit10.0 HighDecember 22, 2004
yamtThe id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary...CVE-2004-130210.0 HighDecember 22, 2004
xlreaderBuffer overflow in the book_format_sql function in format.c for xlreader 0.9.0 allows remote...CVE-2004-1301Public exploit10.0 HighDecember 22, 2004
xine xine-libBuffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7...CVE-2004-1300Public exploit10.0 HighDecember 22, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open