Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

gentoo linuxTomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as...CVE-2004-14527.2 HighDecember 31, 2004
mozillaMozilla before 1.6 does not display the entire URL in the status bar when a link contains %00,...CVE-2004-14512.6 LowDecember 31, 2004
mozillaUnknown vulnerability in LiveConnect in Mozilla 1.7 beta allows remote attackers to read...CVE-2004-14505.0 MediumDecember 31, 2004
mozilla, mozilla thunderbird, firebirdsql firebird +2 moreMozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to...CVE-2004-14492.6 LowDecember 31, 2004
jetbox one cmsJetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the...CVE-2004-14484.6 MediumDecember 31, 2004
jetbox one cmsJetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which...CVE-2004-14475.0 MediumDecember 31, 2004
juniper netscreen screenosUnknown vulnerability in ScreenOS in Juniper Networks NetScreen firewall 3.x through 5.x allows...CVE-2004-14465.0 MediumDecember 31, 2004
nessusA race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR...CVE-2004-14453.7 LowDecember 31, 2004
roundup-tracker roundupRoundup Directory traversal vulnerabilityCVE-2004-1444Public exploitFix available5.0 MediumDecember 31, 2004
horde impCross-site scripting (XSS) vulnerability in the inline MIME viewer in Horde-IMP (Internet...CVE-2004-14434.3 MediumDecember 31, 2004
ibm net.dataCross-site scripting (XSS) vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2...CVE-2004-1442Public exploit4.3 MediumDecember 31, 2004
board power powerCross-site scripting (XSS) vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers...CVE-2004-1441Public exploit9.3 HighDecember 31, 2004
puttyMultiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow (1) remote...CVE-2004-1440Fix available7.5 HighDecember 31, 2004
sapporoworks black jumbodogBuffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long...CVE-2004-1439Public exploitEPSS 15.8%7.5 HighDecember 31, 2004
subversionThe mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated...CVE-2004-1438Fix available2.1 LowDecember 31, 2004
pavukMultiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and...CVE-2004-1437Public exploitEPSS 13.4%7.5 HighDecember 31, 2004
cisco optical networking systems softwareThe Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454...CVE-2004-14367.5 HighDecember 31, 2004
cisco optical networking systems softwareMultiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1),...CVE-2004-14355.0 MediumDecember 31, 2004
cisco optical networking systems softwareMultiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.1(0) to 4.1(2), 4...CVE-2004-14345.0 MediumDecember 31, 2004
cisco optical networking systems softwareMultiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1),...CVE-2004-14335.0 MediumDecember 31, 2004
cisco optical networking systems softwareMultiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1),...CVE-2004-14325.0 MediumDecember 31, 2004
No product listedFormMail.php 5.0, and possibly other versions, allows remote attackers to read arbitrary files...CVE-2004-14315.0 MediumDecember 31, 2004
ipbproarcadeSQL injection vulnerability in the show_stats module in Arcade.php in IbProArcade allows remote...CVE-2004-14307.5 HighDecember 31, 2004
argosoft ftp serverArGoSoft FTP 1.4.2.4 and earlier does not limit the number of times that a bad password can be...CVE-2004-14297.5 HighDecember 31, 2004
argosoft ftp serverArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of...CVE-2004-14285.0 MediumDecember 31, 2004
korweblogPHP remote file inclusion vulnerability in main.inc in KorWeblog 1.6.2-cvs and earlier allows...CVE-2004-14277.5 HighDecember 31, 2004
korweblogDirectory traversal vulnerability in index.php in KorWeblog 1.6.2-cvs and earlier allows remote...CVE-2004-14265.0 MediumDecember 31, 2004
moodleDirectory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers...CVE-2004-14255.0 MediumDecember 31, 2004
moodleCross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote...CVE-2004-14244.3 MediumDecember 31, 2004
php-calendarMultiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as...CVE-2004-1423Public exploitEPSS 15.5%7.5 HighDecember 31, 2004
whm autopilotWHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via...CVE-2004-1422Public exploit5.0 MediumDecember 31, 2004
whm autopilotMultiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3)...CVE-2004-1421Public exploit7.5 HighDecember 31, 2004
whm autopilotMultiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and...CVE-2004-1420Public exploit4.3 MediumDecember 31, 2004
zeroboardPHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers...CVE-2004-14196.8 MediumDecember 31, 2004
No product listedCross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers...CVE-2004-1418Public exploit4.3 MediumDecember 31, 2004
psychostatsCross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier...CVE-2004-1417Public exploit4.3 MediumDecember 31, 2004
No product listedpnxr3260.dll in the RealOne 2.0 build 6.0.11.868 browser plugin, as used in Internet Explorer,...CVE-2004-14165.1 MediumDecember 31, 2004
ben3w 2bgalSQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal 2.4 and...CVE-2004-1415Public exploit5.0 MediumDecember 31, 2004
gadu-gadu instant messengerGadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service (application hang)...CVE-2004-14145.0 MediumDecember 31, 2004
kayako esupportMultiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute...CVE-2004-1413Public exploit5.0 MediumDecember 31, 2004
kayako esupportCross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote...CVE-2004-1412Public exploit4.3 MediumDecember 31, 2004
gadu-gadu instant messengerGadu-Gadu build 155 and earlier allows remote attackers to cause a denial of service (infinite...CVE-2004-14112.6 LowDecember 31, 2004
gadu-gadu instant messengerCross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote...CVE-2004-1410Public exploit4.3 MediumDecember 31, 2004
singapore image gallery web applicationMultiple cross-site scripting vulnerabilities in Image Gallery Web Application 0.9.10 allow...CVE-2004-14095.0 MediumDecember 31, 2004
No product listedThe addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly...CVE-2004-14087.5 HighDecember 31, 2004
singapore image gallery web applicationMultiple directory traversal vulnerabilities in singapore Image Gallery Web Application 0.9.10...CVE-2004-14075.0 MediumDecember 31, 2004
ikonboard.com ikonboardSQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote...CVE-2004-1406Public exploit7.5 HighDecember 31, 2004
mediawikiMediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with...CVE-2004-1405Public exploitFix available7.5 HighDecember 31, 2004
opentools attachment modAttachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, does not properly handle...CVE-2004-14047.5 HighDecember 31, 2004
sir gnuboardPHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote...CVE-2004-14037.5 HighDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open