Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

iwebnegarSQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL...CVE-2004-1402Public exploit10.0 HighDecember 31, 2004
asp-riderSQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute...CVE-2004-1401Public exploit7.5 HighDecember 31, 2004
active server corner asp calendarThe control panel in ASP Calendar does not require authentication to access, which allows remote...CVE-2004-1400Public exploit7.5 HighDecember 31, 2004
opentools attachment modDirectory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows...CVE-2004-13995.0 MediumDecember 31, 2004
roxio toastFormat string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in...CVE-2004-13984.6 MediumDecember 31, 2004
usemod-wiki DebianCross-site scripting (XSS) vulnerability in UseModWiki 1.0 allows remote attackers to inject...CVE-2004-1397Fix available4.3 MediumDecember 31, 2004
nullsoft winampWinamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service ...CVE-2004-13962.6 LowDecember 31, 2004
monolith productions contract jack, no one lives forever 2, tron +2 moreThe Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3...CVE-2004-1395Public exploit5.0 MediumDecember 31, 2004
sun solaris, sunos +1 moreThe pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile...CVE-2004-13944.6 MediumDecember 31, 2004
sun solaris, sunos +1 moreUnknown vulnerability in the tcsetattr function for Sun Solaris for SPARC 2.6, 7, and 8 allows...CVE-2004-13935.0 MediumDecember 31, 2004
phpPHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read...CVE-2004-1392Public exploitEPSS 10.8%5.0 MediumDecember 31, 2004
qnx rtp, rtos +1 moreUntrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local...CVE-2004-13914.6 MediumDecember 31, 2004
qnx rtp, rtos +1 moreMultiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to...CVE-2004-139010.0 HighDecember 31, 2004
veritas netbackupUnknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup...CVE-2004-1389Public exploit6.0 MediumDecember 31, 2004
berlios gps daemonFormat string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly...CVE-2004-1388Public exploitFix availableEPSS 68.2%7.5 HighDecember 31, 2004
apache http serverThe check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or...CVE-2004-13872.1 LowDecember 31, 2004
tiki tikiwiki cms\/groupwareTikiWiki before 1.8.4.1 does not properly verify uploaded images, which could allow remote...CVE-2004-13867.5 HighDecember 31, 2004
phpgroupwarephpGroupWare 0.9.16.003 and earlier allows remote attackers to gain sensitive information via (1)...CVE-2004-1385Public exploit5.0 MediumDecember 31, 2004
phpgroupwareMultiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow...CVE-2004-1384Public exploit4.3 MediumDecember 31, 2004
phpgroupwareMultiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote...CVE-2004-1383Public exploit7.5 HighDecember 31, 2004
gnu glibcThe glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files...CVE-2004-1382Fix available2.1 LowDecember 31, 2004
cvsCVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current...CVE-2004-1343Fix available5.0 MediumDecember 31, 2004
hp hp-ux, hp-ux series 700, hp-ux series 800 +2 more +4 moreStack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled...CVE-2004-13327.5 HighDecember 31, 2004
ibm aixBuffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code...CVE-2004-1330Public exploit7.2 HighDecember 31, 2004
hp hp-uxUnknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain...CVE-2004-13287.2 HighDecember 31, 2004
crystal art software ftpBuffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary...CVE-2004-1327Public exploit7.5 HighDecember 31, 2004
microsoft windows 2000, windows nt, windows xp +1 more +3 moreHeap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP...CVE-2004-1306Public exploitEPSS 21.1%5.1 MediumDecember 31, 2004
groff DebianThe (1) eqn2graph and (2) pic2graph scripts in groff 1.18.1 allow local users to overwrite...CVE-2004-1296Fix available2.1 LowDecember 31, 2004
netscape directory serverBuffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other...CVE-2004-123610.0 HighDecember 31, 2004
linux kernelload_elf_binary in Linux before 2.4.26 allows local users to cause a denial of service (system...CVE-2004-12342.1 LowDecember 31, 2004
mit kerberos 5The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3...CVE-2004-1189Fix available7.2 HighDecember 31, 2004
gnu enscriptMultiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a...CVE-2004-1186Fix available5.0 MediumDecember 31, 2004
hylafaxhfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote...CVE-2004-1182Fix available7.5 HighDecember 31, 2004
nullsoft winampStack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows...CVE-2004-1150Public exploit5.1 MediumDecember 31, 2004
cvstracMultiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac...CVE-2004-11464.3 MediumDecember 31, 2004
linux kernelUnknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local...CVE-2004-11447.2 HighDecember 31, 2004
gnu mailmanThe password generation in mailman before 2.1.5 generates only 5 million unique passwords, which...CVE-2004-11437.5 HighDecember 31, 2004
ethereal group etherealThe HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of...CVE-2004-11415.0 MediumDecember 31, 2004
ethereal group etherealEthereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application...CVE-2004-11405.0 MediumDecember 31, 2004
mozilla bugzillaCross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11...CVE-2004-10614.3 MediumDecember 31, 2004
microsoft windows 2000, windows 2003 server, windows nt +1 more +3 moreInteger overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote...CVE-2004-1049EPSS 30.1%5.1 MediumDecember 31, 2004
microsoft internet explorer, windows xp +1 moreInternet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by...CVE-2004-1043Public exploitEPSS 45.0%5.0 MediumDecember 31, 2004
linux kernelMultiple "overflows" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and...CVE-2004-101710.0 HighDecember 31, 2004
linux kernelUnspecified vulnerability in the ptrace MIPS assembly code in Linux kernel 2.4 before 2.4.17...CVE-2004-09974.6 MediumDecember 31, 2004
gnu mailutilsUnknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU...CVE-2004-0984Fix available7.2 HighDecember 31, 2004
hp hp-uxHP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command,...CVE-2004-09526.4 MediumDecember 31, 2004
hp ignite-uxThe make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of...CVE-2004-09517.5 HighDecember 31, 2004
mysql maxdbMySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an...CVE-2004-09315.0 MediumDecember 31, 2004
freebsdThe syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory...CVE-2004-09194.6 MediumDecember 31, 2004
apple mac os xPPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a...CVE-2004-0824Public exploit2.1 LowDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open