Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

invision power services power top site listSQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier...CVE-2004-1836Public exploit7.5 HighDecember 31, 2004
invision power services galleryMultiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote...CVE-2004-1835Public exploit7.5 HighDecember 31, 2004
apple mac os x serverBuffer overflow in the GUI admin service in Mac OS X Server 10.3 allows remote attackers to cause...CVE-2004-18325.0 MediumDecember 31, 2004
techland chromeBuffer overflow in Chrome 1.2.0.0 and earlier allows remote attackers to cause a denial of...CVE-2004-18315.0 MediumDecember 31, 2004
belchior foundry vcardVcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which...CVE-2004-1828Public exploit5.0 MediumDecember 31, 2004
No product listedCross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers...CVE-2004-1824Public exploit4.3 MediumDecember 31, 2004
jelsoft vbulletinMultiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0...CVE-2004-1823Public exploit4.3 MediumDecember 31, 2004
vocaltec vgw4 8 telephony gatewayDirectory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read...CVE-2004-18145.0 MediumDecember 31, 2004
vocaltec vgw4 8 telephony gatewayVocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request...CVE-2004-1813Public exploit7.5 HighDecember 31, 2004
broadcom unicenter tngMultiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe...CVE-2004-1812EPSS 45.2%10.0 HighDecember 31, 2004
hp ssl http serverThe SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access...CVE-2004-18117.5 HighDecember 31, 2004
opera browserThe Javascript engine in Opera 7.23 allows remote attackers to cause a denial of service (crash)...CVE-2004-18105.0 MediumDecember 31, 2004
phpbb group phpbbCross-site scripting (XSS) vulnerability in phpBB 2.0.6d and earlier allows remote attackers to...CVE-2004-18094.3 MediumDecember 31, 2004
metamail corporation metamailExtcompose in metamail does not verify the output file before writing to it, which allows local...CVE-2004-18082.1 LowDecember 31, 2004
dogpatch software cfwebstoreCross-site scripting (XSS) vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers...CVE-2004-18074.3 MediumDecember 31, 2004
dogpatch software cfwebstoreSQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL...CVE-2004-18067.5 HighDecember 31, 2004
epic games unreal engineFormat string vulnerability in games using the Epic Games Unreal Engine 436 allows remote...CVE-2004-1805Public exploit5.0 MediumDecember 31, 2004
invicta wmcam serverwMCam server 2.1.348 allows remote attackers to cause a denial of service (no new connections)...CVE-2004-18045.0 MediumDecember 31, 2004
No product listedChat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00...CVE-2004-18025.0 MediumDecember 31, 2004
pwebserver web serverDirectory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary...CVE-2004-1801Public exploit5.0 MediumDecember 31, 2004
No product listedUnknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote...CVE-2004-18007.5 HighDecember 31, 2004
openbsdPF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a...CVE-2004-17997.5 HighDecember 31, 2004
realnetworks realone player, realone enterprise desktop, realplayer +2 moreRealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer...CVE-2004-17985.1 MediumDecember 31, 2004
No product listedCross-site scripting (XSS) vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier...CVE-2004-1797Public exploit4.3 MediumDecember 31, 2004
hotnewsPHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to...CVE-2004-1796Public exploit7.5 HighDecember 31, 2004
No product listedInfo Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI.CVE-2004-17952.1 LowDecember 31, 2004
vcard4jCross-site scripting (XSS) vulnerability in the VCard4J Toolkit allows remote attackers to inject...CVE-2004-17944.3 MediumDecember 31, 2004
yatsoft switch offStack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote...CVE-2004-1793Public exploit7.5 HighDecember 31, 2004
yatsoft switch offswnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of...CVE-2004-1792Public exploit5.0 MediumDecember 31, 2004
edimax full rate adsl routerThe web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and...CVE-2004-17917.5 HighDecember 31, 2004
edimax full rate adsl routerCross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL...CVE-2004-1790Public exploit4.3 MediumDecember 31, 2004
zyxel zywall10Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows...CVE-2004-1789Public exploitEPSS 11.2%4.3 MediumDecember 31, 2004
asp-nukeASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient...CVE-2004-1788Public exploit5.0 MediumDecember 31, 2004
postnuke software foundation postcalendarSQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary...CVE-2004-17877.5 HighDecember 31, 2004
No product listedDirectory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to...CVE-2004-1783Public exploit7.5 HighDecember 31, 2004
david maciejak athena web registrationathenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands...CVE-2004-1782Public exploitEPSS 28.6%7.5 HighDecember 31, 2004
info touch surfnetInfo Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating...CVE-2004-1781Public exploit4.6 MediumDecember 31, 2004
info touch surfnetInfo Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts...CVE-2004-17804.6 MediumDecember 31, 2004
thwboard betaCross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote...CVE-2004-17794.3 MediumDecember 31, 2004
skype technologies skypeA "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to...CVE-2004-17775.0 MediumDecember 31, 2004
cisco catos, ios +1 moreCisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1...CVE-2004-17755.0 MediumDecember 31, 2004
gnu sharutilsMultiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary...CVE-2004-1773Fix available7.5 HighDecember 31, 2004
gnu sharutilsStack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute...CVE-2004-1772Fix available4.6 MediumDecember 31, 2004
sun solaris, sunos +1 moreThe kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary...CVE-2004-17677.2 HighDecember 31, 2004
mod security securityOff-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when...CVE-2004-17657.5 HighDecember 31, 2004
haht commerce hahtsite scenario serverBuffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 (build 91) allows remote...CVE-2004-176310.0 HighDecember 31, 2004
f-secure anti-virusUnknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the...CVE-2004-17627.5 HighDecember 31, 2004
ethereal group etherealUnknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service ...CVE-2004-17615.0 MediumDecember 31, 2004
bea weblogic serverBEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in...CVE-2004-17574.6 MediumDecember 31, 2004
No product listedThe Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2...CVE-2004-17557.5 HighDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open