Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

broadboard instant asp message boardMultiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote...CVE-2004-1555Public exploit7.5 HighDecember 31, 2004
alexphpteam alex guestbookPHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote...CVE-2004-1554Public exploit7.5 HighDecember 31, 2004
fullrevolution aspwebalbumSQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL...CVE-2004-1553Public exploit7.5 HighDecember 31, 2004
full revolution aspwebcalendarSQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL...CVE-2004-1552Public exploit7.5 HighDecember 31, 2004
php arena pafiledbCross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1...CVE-2004-1551Public exploit4.3 MediumDecember 31, 2004
motorola wr850gMotorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass...CVE-2004-1550EPSS 18.6%7.5 HighDecember 31, 2004
onnuri infotek activepost standardThe conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in...CVE-2004-15495.0 MediumDecember 31, 2004
onnuri infotek activepost standardDirectory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote...CVE-2004-15485.0 MediumDecember 31, 2004
onnuri infotek activepost standardThe file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause...CVE-2004-15475.0 MediumDecember 31, 2004
alt-n mdaemonMultiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service ...CVE-2004-1546Public exploitEPSS 31.1%5.0 MediumDecember 31, 2004
moniwikiUploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache mod_mime, does not properly...CVE-2004-15455.0 MediumDecember 31, 2004
jspwikiCross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows...CVE-2004-15444.3 MediumDecember 31, 2004
korweblogDirectory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote...CVE-2004-1543Public exploit5.0 MediumDecember 31, 2004
raven software soldier of fortuneBuffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a...CVE-2004-1542Public exploit5.0 MediumDecember 31, 2004
van dyke technologies securecrtSecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary...CVE-2004-15417.5 HighDecember 31, 2004
zyxel prestige, zynos +1 moreZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote...CVE-2004-1540Public exploit5.0 MediumDecember 31, 2004
gearbox software halo combat evolvedHalo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service ...CVE-2004-1539Public exploit5.0 MediumDecember 31, 2004
phpkitSQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers...CVE-2004-15387.5 HighDecember 31, 2004
phpkitCross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows...CVE-2004-1537Public exploit4.3 MediumDecember 31, 2004
ipbproarcadeSQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board (IPB)...CVE-2004-1536Public exploit7.5 HighDecember 31, 2004
phpbb group phpbbPHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB...CVE-2004-1535Public exploit7.5 HighDecember 31, 2004
zonelabs zonealarmZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to...CVE-2004-15345.0 MediumDecember 31, 2004
digital mappings systems pop3 serverBuffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause...CVE-2004-1533Public exploit5.0 MediumDecember 31, 2004
appserv open project appservAppServ 2.5.x and earlier installs a default username and password, which allows remote attackers...CVE-2004-15327.5 HighDecember 31, 2004
invision power services boardSQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows...CVE-2004-1531Public exploit7.5 HighDecember 31, 2004
No product listedSQL injection vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote...CVE-2004-15307.5 HighDecember 31, 2004
rob sutton php-nuke event calendarCross-site scripting (XSS) vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows...CVE-2004-15294.3 MediumDecember 31, 2004
rob sutton php-nuke event calendarThe Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information...CVE-2004-15285.0 MediumDecember 31, 2004
No product listedMicrosoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the...CVE-2004-15275.0 MediumDecember 31, 2004
new media generation hired team trialHired Team: Trial 2.0 and earlier and 2.200 does not limit how game players can kick other...CVE-2004-15267.5 HighDecember 31, 2004
No product listedHired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service ...CVE-2004-15255.0 MediumDecember 31, 2004
new media generation hired team trialHired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service ...CVE-2004-15245.0 MediumDecember 31, 2004
new media generation hired team trialFormat string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200...CVE-2004-15235.0 MediumDecember 31, 2004
3do army men real time strategy gameFormat string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of...CVE-2004-15225.0 MediumDecember 31, 2004
qualcomm eudoraEudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains...CVE-2004-1521Public exploit5.0 MediumDecember 31, 2004
ipswitch imailStack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute...CVE-2004-1520Public exploitEPSS 88.5%4.6 MediumDecember 31, 2004
No product listedSQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute...CVE-2004-1519Public exploit7.5 HighDecember 31, 2004
No product listedSQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote...CVE-2004-15184.6 MediumDecember 31, 2004
zonelabs imsecureZone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link...CVE-2004-15177.5 HighDecember 31, 2004
phpwebsiteCRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to...CVE-2004-15165.0 MediumDecember 31, 2004
jelsoft vbulletinSQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote...CVE-2004-1515Public exploit7.5 HighDecember 31, 2004
soft3304 04webserver04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly)...CVE-2004-15145.0 MediumDecember 31, 2004
soft3304 04webserver04WebServer 1.42 does not adequately filter data that is written to log files, which could allow...CVE-2004-15135.0 MediumDecember 31, 2004
soft3304 04webserverCross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows...CVE-2004-15124.3 MediumDecember 31, 2004
No product listedHotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote...CVE-2004-15115.0 MediumDecember 31, 2004
No product listedWebCalendar allows remote attackers to gain privileges by modifying critical parameters to (1)...CVE-2004-15107.5 HighDecember 31, 2004
No product listedvalidate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid...CVE-2004-15095.0 MediumDecember 31, 2004
webcalendarinit.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the...CVE-2004-15087.5 HighDecember 31, 2004
webcalendarCRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF...CVE-2004-15075.0 MediumDecember 31, 2004
webcalendarMultiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote attackers to...CVE-2004-15064.3 MediumDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open