Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

mephistoles internet suite httpdCross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers...CVE-2004-2096Public exploit4.3 MediumDecember 31, 2004
niels provos honeydHoneyd before 0.8 replies to TCP packets with the SYN and RST flags set, which allows remote...CVE-2004-20955.0 MediumDecember 31, 2004
darkwet webcam xpCross-site scripting (XSS) vulnerability in WebcamXP 1.06.945 allows remote attackers to inject...CVE-2004-2094Public exploit4.3 MediumDecember 31, 2004
karjasoft sami ftp serverThe samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service ...CVE-2004-2081Public exploit5.0 MediumDecember 31, 2004
jelsoft vbulletinCross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows...CVE-2004-2076Public exploit4.3 MediumDecember 31, 2004
No product listedSophos Anti-Virus 3.78 allows remote attackers to cause a denial of service (infinite loop) via a...CVE-2004-20755.0 MediumDecember 31, 2004
bolintech dream ftp serverFormat string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service ...CVE-2004-2074Public exploitEPSS 35.8%5.0 MediumDecember 31, 2004
mambo open sourceCross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly...CVE-2004-2072Public exploit6.8 MediumDecember 31, 2004
macallan mail solutionMacallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote...CVE-2004-2071Public exploit7.5 HighDecember 31, 2004
No product listedThe Altiris Client Service for Windows 5.6 SP1 Hotfix E (5.6.181) allows local users to execute...CVE-2004-20707.2 HighDecember 31, 2004
openbsd opensshsshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege...CVE-2004-2069Fix available5.0 MediumDecember 31, 2004
leafnodefetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service ...CVE-2004-20685.0 MediumDecember 31, 2004
daniel barron dansguardianDansGuardian 2.8 and earlier allows remote attackers to bypass the extension filtering rule via a...CVE-2004-20657.5 HighDecember 31, 2004
antiboardCross-site scripting (XSS) vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows...CVE-2004-2063Public exploit4.3 MediumDecember 31, 2004
antiboardSQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote...CVE-2004-2062Public exploit7.5 HighDecember 31, 2004
xlinesoft asprunnerASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote...CVE-2004-2060Public exploit5.0 MediumDecember 31, 2004
xlinesoft asprunnerMultiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject...CVE-2004-2059Public exploit5.0 MediumDecember 31, 2004
xlinesoft asprunnerASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or...CVE-2004-20585.0 MediumDecember 31, 2004
xlinesoft asprunnerSQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL...CVE-2004-20577.5 HighDecember 31, 2004
nucleus group cmsSQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute...CVE-2004-20567.5 HighDecember 31, 2004
phpbb group phpbbCRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP...CVE-2004-20545.0 MediumDecember 31, 2004
esesix thintuneeSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins...CVE-2004-20527.5 HighDecember 31, 2004
esesix thintune extreme, thintune l, thintune m +4 more +6 moreeSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain...CVE-2004-20504.6 MediumDecember 31, 2004
esesix thintune extreme, thintune l, thintune m +4 more +6 moreeSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and...CVE-2004-20494.6 MediumDecember 31, 2004
esesix thintune extreme, thintune l, thintune m +4 more +6 moreradmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port...CVE-2004-204810.0 HighDecember 31, 2004
apc powerchuteUnknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote...CVE-2004-20465.0 MediumDecember 31, 2004
conceptronic cadslr1 adsl routerThe HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n...CVE-2004-2045Public exploit5.0 MediumDecember 31, 2004
apsis poundFormat string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows...CVE-2004-2026Public exploitFix available7.5 HighDecember 31, 2004
zen cart cartSQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow...CVE-2004-20257.5 HighDecember 31, 2004
zen cart cartThe distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin...CVE-2004-20247.5 HighDecember 31, 2004
zen cart cartSQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly...CVE-2004-20237.5 HighDecember 31, 2004
activestate activeperlActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows...CVE-2004-2022Public exploit2.1 LowDecember 31, 2004
oscommerceDirectory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers...CVE-2004-2021Public exploit5.0 MediumDecember 31, 2004
francisco burzi php-nukeMultiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 6.x through 7.3 allow remote...CVE-2004-20204.3 MediumDecember 31, 2004
francisco burzi php-nukeThe WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive...CVE-2004-20195.0 MediumDecember 31, 2004
francisco burzi php-nukePHP remote file inclusion vulnerability in index.php in Php-Nuke 6.x through 7.3 allows remote...CVE-2004-2018Public exploit7.5 HighDecember 31, 2004
turbotraffictrader cMultiple cross-site scripting (XSS) vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0 allow...CVE-2004-2017Public exploit4.3 MediumDecember 31, 2004
netchat subnet chat applicationStack-based buffer overflow in the HTTP server in NetChat 7.3 and earlier allows remote attackers...CVE-2004-20167.5 HighDecember 31, 2004
webctCross-site scripting (XSS) vulnerability in WebCT Campus Edition allows remote attackers to...CVE-2004-20154.3 MediumDecember 31, 2004
gnu wgetWget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the...CVE-2004-2014Public exploitFix available2.6 LowDecember 31, 2004
linux kernelInteger overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux...CVE-2004-20137.8 HighDecember 31, 2004
netbsd, niels provos systrace, vladimir kotal systrace port for freebsd +2 moreThe systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16,...CVE-2004-2012Public exploit7.2 HighDecember 31, 2004
microsoft internet explorermsxml3.dll in Internet Explorer 6.0.2600.0 allows remote attackers to cause a denial of service ...CVE-2004-20112.6 LowDecember 31, 2004
No product listedPHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote...CVE-2004-20107.5 HighDecember 31, 2004
fusetalkCross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create...CVE-2004-1995Public exploit6.5 MediumDecember 31, 2004
openbbMultiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow...CVE-2004-1966Public exploit7.5 HighDecember 31, 2004
protector system systemSQL injection vulnerability in index.php in Protector System 1.15b1 allows remote attackers to...CVE-2004-1962Public exploit7.5 HighDecember 31, 2004
protector system systemCross-site scripting (XSS) vulnerability in blocker_query.php in Protector System 1.15b1 allows...CVE-2004-1960Public exploit4.3 MediumDecember 31, 2004
epic games unreal engine, unreal tournament, unreal tournament 2003 +2 moreDirectory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to...CVE-2004-1958Public exploit5.0 MediumDecember 31, 2004
phprofessionSQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute...CVE-2004-1955Public exploit7.5 HighDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open