Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, mozilla, netscape navigator +2 moreThe Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS...CVE-2004-17532.6 LowDecember 31, 2004
vnc realvncRealVNC 4.0 and earlier allows remote attackers to cause a denial of service (crash) via a large...CVE-2004-17505.0 MediumDecember 31, 2004
sysinternals regmonNtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is...CVE-2004-1748Public exploit2.1 LowDecember 31, 2004
network everywhere nr041Cross-site scripting (XSS) vulnerability in NetworkEverywhere NR041 running firmware 1.2 Release...CVE-2004-17474.3 MediumDecember 31, 2004
php code snippet library code snippet libraryCross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote...CVE-2004-1746Public exploit4.3 MediumDecember 31, 2004
jshop e-commerce serverCross-site scripting (XSS) vulnerability in page.php in JShop allows remote attackers to inject...CVE-2004-17384.3 MediumDecember 31, 2004
the cacti group cactiCacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1)...CVE-2004-1736Fix available5.0 MediumDecember 31, 2004
mantisPHP remote file inclusion vulnerability in Mantis 0.19.0a allows remote attackers to execute...CVE-2004-17347.5 HighDecember 31, 2004
mantisCross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject...CVE-2004-17304.3 MediumDecember 31, 2004
john bradley xvStack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code...CVE-2004-17257.5 HighDecember 31, 2004
php fusion fusionThe (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers...CVE-2004-17235.0 MediumDecember 31, 2004
cerulean studios trillianBuffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute...CVE-2004-1666Public exploit7.5 HighDecember 31, 2004
sct corporation campus pipelineCross-site scripting (XSS) vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline...CVE-2004-15934.3 MediumDecember 31, 2004
ocportalPHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote...CVE-2004-1592Public exploit7.5 HighDecember 31, 2004
micronet sp916bmThe web interface for Micronet Wireless Broadband Router SP916BM running firmware before 1.9 08...CVE-2004-15917.5 HighDecember 31, 2004
clientexecClientexec allows remote attackers to gain sensitive information via an HTTP request to phpinfo...CVE-2004-15905.0 MediumDecember 31, 2004
gosmart message boardCross-site scripting (XSS) vulnerability in GoSmart Message Board allows remote attackers to...CVE-2004-15894.3 MediumDecember 31, 2004
gosmart message boardSQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary...CVE-2004-15887.5 HighDecember 31, 2004
monolith productions alien versus predator, blood, no one lives forever +1 more +3 moreBuffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2)...CVE-2004-1587Public exploit5.0 MediumDecember 31, 2004
jera technology flash messaging serverFlash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash...CVE-2004-15862.1 LowDecember 31, 2004
jera technology flash messagingFlash Messaging 5.2.0g (rev 1.1.2) and earlier allows remote attackers to cause a denial of...CVE-2004-1585Public exploit5.0 MediumDecember 31, 2004
wordpressCRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform...CVE-2004-1584Public exploitFix availableEPSS 11.2%5.0 MediumDecember 31, 2004
tridcommDirectory traversal vulnerability in the FTP server in TriDComm 1.3 and earlier allows remote...CVE-2004-15836.4 MediumDecember 31, 2004
blackboard internet newsboard system internet newsboard systemPHP remote file inclusion vulnerability in BlackBoard 1.5.1 allows remote attackers to execute...CVE-2004-15827.5 HighDecember 31, 2004
blackboardBlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1...CVE-2004-15815.0 MediumDecember 31, 2004
devellion cubecartSQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute...CVE-2004-1580Public exploit7.5 HighDecember 31, 2004
devellion cubecartindex.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP...CVE-2004-15795.0 MediumDecember 31, 2004
invision power services power boardCross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote...CVE-2004-15784.3 MediumDecember 31, 2004
greg donald phplinksindex.php in PHP Links allows remote attackers to gain sensitive information via an invalid show...CVE-2004-15775.0 MediumDecember 31, 2004
No product listedFormat string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote...CVE-2004-15765.0 MediumDecember 31, 2004
apache xerces-c\+\+The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU...CVE-2004-15755.0 MediumDecember 31, 2004
No product listedBuffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute...CVE-2004-15747.5 HighDecember 31, 2004
aj-fork, cutephp cutenews +1 moreThe documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to...CVE-2004-15737.2 HighDecember 31, 2004
aj-forkAJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4)...CVE-2004-15725.0 MediumDecember 31, 2004
aj-forkAJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to (1)...CVE-2004-15715.0 MediumDecember 31, 2004
eaden mckee bblogSQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary...CVE-2004-15707.5 HighDecember 31, 2004
illustrate dbpoweramp audio player, dbpoweramp music converter +1 moreBuffer overflow in (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe in dBpowerAMP Audio...CVE-2004-1569Public exploit4.0 MediumDecember 31, 2004
parachat serverDirectory traversal vulnerability in ParaChat Server 5.5 allows remote attackers to read...CVE-2004-15685.0 MediumDecember 31, 2004
No product listedprofile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by...CVE-2004-1567Public exploit7.5 HighDecember 31, 2004
silent-storm portalCross-site scripting (XSS) vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows...CVE-2004-15664.3 MediumDecember 31, 2004
w-agoralist.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP...CVE-2004-15655.0 MediumDecember 31, 2004
w-agoraCRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to...CVE-2004-1564Public exploit5.0 MediumDecember 31, 2004
w-agoraMultiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to...CVE-2004-1563Public exploit4.3 MediumDecember 31, 2004
w-agoraSQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute...CVE-2004-1562Public exploit7.5 HighDecember 31, 2004
icecastBuffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code...CVE-2004-1561Public exploitFix availableEPSS 77.9%7.5 HighDecember 31, 2004
microsoft sql serverMicrosoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver...CVE-2004-1560Public exploitEPSS 25.6%5.0 MediumDecember 31, 2004
wordpressMultiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to...CVE-2004-1559Public exploitFix available4.3 MediumDecember 31, 2004
ypopsMultiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote...CVE-2004-1558Public exploitEPSS 71.1%7.5 HighDecember 31, 2004
mywebserverMyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and...CVE-2004-15576.4 MediumDecember 31, 2004
mywebserverMyWebServer 1.0.3 allows remote attackers to cause a denial of service (application crash) via a...CVE-2004-15565.0 MediumDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open