Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

phprofessionphProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request...CVE-2004-1953Public exploit5.0 MediumDecember 31, 2004
xine, xine xine-ui, xine-lib +2 morexine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote...CVE-2004-1951Public exploitFix available5.0 MediumDecember 31, 2004
postnuke software foundation postnukeSQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute...CVE-2004-19497.5 HighDecember 31, 2004
wirlab kphonesipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service ...CVE-2004-1940Public exploit5.0 MediumDecember 31, 2004
nuked-klanMultiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b allow remote attackers...CVE-2004-1937Public exploit5.0 MediumDecember 31, 2004
francisco burzi php-nuke, shiba-design nukecalendar +1 moreSQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows...CVE-2004-1914Public exploit7.5 HighDecember 31, 2004
francisco burzi php-nuke, shiba-design nukecalendar +1 moreCross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP...CVE-2004-1913Public exploit4.3 MediumDecember 31, 2004
francisco burzi php-nuke, shiba-design nukecalendar +1 moreThe (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center...CVE-2004-1912Public exploit5.0 MediumDecember 31, 2004
azerbaijan development group azdgdatingCross-site scripting (XSS) vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to...CVE-2004-1911Public exploit4.3 MediumDecember 31, 2004
symantec security check virus detectionrufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service (crash...CVE-2004-1910Public exploit5.0 MediumDecember 31, 2004
clam anti-virus clamavClaim Anti-Virus (ClamAV) 0.68 and earlier allows remote attackers to cause a denial of service ...CVE-2004-1909Fix available2.6 LowDecember 31, 2004
mcafee freescanMcFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain...CVE-2004-1908Public exploit5.0 MediumDecember 31, 2004
No product listedThe Web Filtering functionality in Kerio Personal Firewall (KPF) 4.0.13 allows remote attackers...CVE-2004-1907Public exploit2.6 LowDecember 31, 2004
No product listedMcafee FreeScan allows remote attackers to cause a denial of service and possibly arbitrary code...CVE-2004-1906Public exploit5.0 MediumDecember 31, 2004
panda activescanascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash...CVE-2004-19055.0 MediumDecember 31, 2004
panda activescanBuffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute...CVE-2004-1904Public exploit7.5 HighDecember 31, 2004
blaxxun contact 3dBuffer overflow in blaxxun 3D 7.0 allows remote attackers to execute arbitrary code via a long...CVE-2004-1903Public exploit10.0 HighDecember 31, 2004
citrix metaframe password managerThe Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured,...CVE-2004-19022.1 LowDecember 31, 2004
gentoo portage, linux +1 morePortage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack...CVE-2004-19015.5 MediumDecember 31, 2004
pan vision i.g.i-2 covert strikeFormat string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier...CVE-2004-19007.5 HighDecember 31, 2004
tildeslash monitThe administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by...CVE-2004-1899Fix available5.0 MediumDecember 31, 2004
tildeslash monitStack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows...CVE-2004-1898Public exploitFix availableEPSS 16.6%10.0 HighDecember 31, 2004
monit DebianAdministration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of...CVE-2004-1897Public exploitFix available5.0 MediumDecember 31, 2004
nullsoft winampHeap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote...CVE-2004-18967.6 HighDecember 31, 2004
suse linuxYaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via...CVE-2004-18952.1 LowDecember 31, 2004
No product listedTEXutil in ConTEXt, when executed with the --silent option, allows local users to overwrite...CVE-2004-18942.1 LowDecember 31, 2004
No product listedDreamweaver MX, when "Using Driver On Testing Server" or "Using DSN on Testing Server" is...CVE-2004-18935.0 MediumDecember 31, 2004
emuleStack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web...CVE-2004-1892Public exploitEPSS 10.0%7.5 HighDecember 31, 2004
sgi irixThe ftp_syslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has...CVE-2004-18915.0 MediumDecember 31, 2004
sgi irixUnknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause...CVE-2004-18895.0 MediumDecember 31, 2004
aborior encore web forumdisplay.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell...CVE-2004-1888Public exploit7.5 HighDecember 31, 2004
ada imgsvrAda Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via...CVE-2004-1887Public exploit5.0 MediumDecember 31, 2004
progress ws ftp serverIpswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as...CVE-2004-18857.2 HighDecember 31, 2004
progress ws ftp serverMultiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to...CVE-2004-1883Public exploit7.2 HighDecember 31, 2004
cactusoft cactushopCross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows remote...CVE-2004-1882Public exploit4.3 MediumDecember 31, 2004
cactusoft cactushopSQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows...CVE-2004-1881Public exploit7.5 HighDecember 31, 2004
openldapMemory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to...CVE-2004-18805.0 MediumDecember 31, 2004
phpkitCross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows allows remote attackers to...CVE-2004-18794.3 MediumDecember 31, 2004
alan ward a-cartSQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers...CVE-2004-1873Public exploit7.5 HighDecember 31, 2004
nival interactive etherlords, etherlords ii +1 moreEtherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause...CVE-2004-18695.0 MediumDecember 31, 2004
web fresh fresh guest bookCross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote attackers...CVE-2004-1867Public exploit4.3 MediumDecember 31, 2004
xmb forum xmbMultiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta ...CVE-2004-18634.3 MediumDecember 31, 2004
xmb forum xmbBuffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote...CVE-2004-18605.0 MediumDecember 31, 2004
No product listedHP Web Jetadmin 7.5.2546 allows remote attackers to cause a denial of service (crash) via a...CVE-2004-18585.0 MediumDecember 31, 2004
ipswitch ws ftp serverIpswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk...CVE-2004-18485.0 MediumDecember 31, 2004
expinion.net news manager liteMultiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote...CVE-2004-1845Public exploit4.3 MediumDecember 31, 2004
No product listedCross-site scripting (XSS) vulnerability in Member Management System 2.1 allows remote attackers...CVE-2004-1844Public exploit4.3 MediumDecember 31, 2004
phpnuke php-nukeCross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote...CVE-2004-1842Public exploit8.8 HighDecember 31, 2004
ms analysis website traffic analyzerSQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to...CVE-2004-18417.5 HighDecember 31, 2004
joel palmius mod surveyCross-site scripting (XSS) vulnerability in Mod_survey 3.0.x before 3.0.16-pre2 and 3.2.x before...CVE-2004-18374.3 MediumDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open