Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

salims softhouse jaf cmsDirectory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows...CVE-2004-15057.5 HighDecember 31, 2004
salims softhouse jaf cmsThe displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows...CVE-2004-15045.0 MediumDecember 31, 2004
sun jreInteger overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and...CVE-2004-15035.0 MediumDecember 31, 2004
software602 602lan suiteThe Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a...CVE-2004-15025.0 MediumDecember 31, 2004
software602 602lan suiteThe webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause...CVE-2004-15015.0 MediumDecember 31, 2004
freeform interactive purge jihad, monolith productions alien versus predator, blood +8 more +10 moreFormat string vulnerability in the Lithtech engine, as used in multiple games, allows remote...CVE-2004-1500Public exploit2.1 LowDecember 31, 2004
webhost automation helm control panelCross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier...CVE-2004-1499Public exploit4.3 MediumDecember 31, 2004
webhost automation helm control panelSQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote...CVE-2004-14987.5 HighDecember 31, 2004
No product listedWeb Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file,...CVE-2004-14974.6 MediumDecember 31, 2004
minihttpserver.net web forums serverDirectory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote...CVE-2004-14965.0 MediumDecember 31, 2004
rarlab winrarThe Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service ...CVE-2004-14952.6 LowDecember 31, 2004
kingsoft xdictBuffer overflow in the Screen Fetch option in XDICT 2002 through 2005 allows remote attackers to...CVE-2004-14945.0 MediumDecember 31, 2004
No product listedMaster of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service ...CVE-2004-1493Public exploit5.0 MediumDecember 31, 2004
quicksilver master of orion iiiMaster of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (game...CVE-2004-14925.0 MediumDecember 31, 2004
gentoo linux, kde, opera browser +2 moreOpera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote...CVE-2004-1491Public exploitEPSS 12.6%5.0 MediumDecember 31, 2004
opera browserOpera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via...CVE-2004-14902.6 LowDecember 31, 2004
opera browserOpera 7.54 and earlier does not properly limit an applet's access to internal Java packages from...CVE-2004-14892.6 LowDecember 31, 2004
No product listedUnknown vulnerability in Serviceguard A.11.13 through A.11.16.00 and Cluster Object Manager A.01...CVE-2004-148610.0 HighDecember 31, 2004
No product listedBuffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to...CVE-2004-14857.5 HighDecember 31, 2004
socatFormat string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when...CVE-2004-1484Public exploitFix available5.0 MediumDecember 31, 2004
symantec clientless vpn gateway 4400Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN...CVE-2004-148310.0 HighDecember 31, 2004
bncThe sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow...CVE-2004-14827.5 HighDecember 31, 2004
realnetworks realone player, realplayer, helix player +2 moreInteger overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and...CVE-2004-14815.1 MediumDecember 31, 2004
hp storageworks command viewUnknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and...CVE-2004-14807.5 HighDecember 31, 2004
macromedia jrun, hitachi cosminexus enterprise, cosminexus server +1 more +3 moreJRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to...CVE-2004-14787.5 HighDecember 31, 2004
macromedia jrunCross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote...CVE-2004-14774.3 MediumDecember 31, 2004
xine, xine xine-lib, suse linux +2 moreStack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived...CVE-2004-1476Fix available5.1 MediumDecember 31, 2004
xine, xine xine-lib +1 moreMultiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute...CVE-2004-1475Public exploit5.1 MediumDecember 31, 2004
symantec gateway security 320, firewall vpn appliance 100, firewall vpn appliance 200 +9 more +11 moreSymantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and...CVE-2004-14745.0 MediumDecember 31, 2004
symantec gateway security 320, firewall vpn appliance 100, firewall vpn appliance 200 +9 more +11 moreSymantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and...CVE-2004-14735.0 MediumDecember 31, 2004
symantec firewall vpn appliance 100, firewall vpn appliance 200, firewall vpn appliance 200r +7 more +9 moreSymantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow...CVE-2004-14725.0 MediumDecember 31, 2004
cvs, freebsd, gentoo linux +3 more +5 moreFormat string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16...CVE-2004-1471Public exploitFix available7.1 HighDecember 31, 2004
snipsnapCRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote...CVE-2004-1470Public exploit5.0 MediumDecember 31, 2004
peter d. gray susFormat string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6,...CVE-2004-14697.2 HighDecember 31, 2004
usermin, webmin +1 moreThe web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute...CVE-2004-14687.5 HighDecember 31, 2004
egroupwareMultiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow...CVE-2004-1467Public exploit4.3 MediumDecember 31, 2004
gallery project galleryThe set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary...CVE-2004-1466Public exploit7.5 HighDecember 31, 2004
winzipMultiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code...CVE-2004-1465Public exploit3.7 LowDecember 31, 2004
cisco iosCisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY ...CVE-2004-1464In KEV5.9 MediumDecember 31, 2004
moinmoinMoinMoin Improper Privilege ManagementCVE-2004-1463Fix available10.0 HighDecember 31, 2004
moinmoinMoinMoin Improper Access ControlCVE-2004-1462Fix available7.5 HighDecember 31, 2004
cisco secure access control server, secure acs solution engine +1 moreCisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP...CVE-2004-14617.5 HighDecember 31, 2004
cisco secure access control server, secure acs solution engine +1 moreCisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous...CVE-2004-14607.5 HighDecember 31, 2004
No product listedCisco Secure Access Control Server (ACS) 3.2, when configured as a Light Extensible...CVE-2004-14595.0 MediumDecember 31, 2004
cisco secure access control server, secure acs solution engine +1 moreThe CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2)...CVE-2004-14585.0 MediumDecember 31, 2004
novell bordermanagerThe Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers...CVE-2004-14575.0 MediumDecember 31, 2004
cvstracfilediff in CVStrac allows remote attackers to execute arbitrary commands via shell...CVE-2004-1456Public exploitEPSS 14.0%7.5 HighDecember 31, 2004
xine xine-libStack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote...CVE-2004-14555.1 MediumDecember 31, 2004
cisco iosCisco IOS 12.0S, 12.2, and 12.3, with Open Shortest Path First (OSPF) enabled, allows remote...CVE-2004-14545.0 MediumDecember 31, 2004
gnu glibcGNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10...CVE-2004-1453Fix available2.1 LowDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open