Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

s9y serendipitySQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary...CVE-2004-2158Public exploit7.5 HighDecember 31, 2004
s9y serendipityCross-site scripting (XSS) vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly...CVE-2004-21574.3 MediumDecember 31, 2004
recruitment agency software online recruitment agencyMultiple unknown vulnerabilities in Online Recruitment Agency 1.0 have unknown impact and attack...CVE-2004-215610.0 HighDecember 31, 2004
No product listedOnline-bookmarks before 0.4.6 allows remote attackers to bypass its authentication mechanism via...CVE-2004-21557.5 HighDecember 31, 2004
apple cups, canonical ubuntu linux +1 moreCUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows...CVE-2004-2154Fix available9.8 CriticalDecember 31, 2004
real estate management software estate management softwareMultiple unknown vulnerabilities in Real Estate Management Software 1.0 have unknown impact and...CVE-2004-215310.0 HighDecember 31, 2004
mediawikiCross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and...CVE-2004-2152Fix available4.3 MediumDecember 31, 2004
virtual projects chatmanChatman 1.1.1 RC1 and earlier allows remote attackers to cause a denial of service (memory...CVE-2004-2151Public exploit5.0 MediumDecember 31, 2004
nettica intellipeer email serverNettica Corporation INTELLIPEER Email Server 1.01 displays different error messages for valid and...CVE-2004-21505.0 MediumDecember 31, 2004
oracle mysqlBuffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4...CVE-2004-21495.0 MediumDecember 31, 2004
slava astashonok fprobeUnknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and...CVE-2004-2148Fix available7.2 HighDecember 31, 2004
symantec norton antivirusUnknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a...CVE-2004-21475.0 MediumDecember 31, 2004
pd9 software megabbsCRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP...CVE-2004-21465.0 MediumDecember 31, 2004
pd9 software megabbsSQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute...CVE-2004-21457.5 HighDecember 31, 2004
baalsystems baal smart formsBaal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system...CVE-2004-21447.5 HighDecember 31, 2004
mambo portalSQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09)...CVE-2004-2143Public exploit7.5 HighDecember 31, 2004
jorg schilling sddUnknown vulnerability in the remote tape support (remote.c) in the RMT client for Jorg Schilling...CVE-2004-214210.0 HighDecember 31, 2004
yabbCRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text...CVE-2004-21405.0 MediumDecember 31, 2004
yabbUnknown vulnerability in Adminedit.pl YaBB 1 Gold before 1.3.2 allows attackers to execute...CVE-2004-21397.5 HighDecember 31, 2004
allwebscripts mysqlguestCross-site scripting (XSS) vulnerability in AWSguest.php in AllWebScripts MySQLGuest allows...CVE-2004-21386.8 MediumDecember 31, 2004
microsoft outlook expressOutlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages...CVE-2004-2137EPSS 26.1%5.0 MediumDecember 31, 2004
loom software surfnow professional, surfnow standard +1 moreSurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long...CVE-2004-2129Public exploit5.0 MediumDecember 31, 2004
No product listedCross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute...CVE-2004-2128Public exploit6.8 MediumDecember 31, 2004
iss blackice pc protectionThe upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files...CVE-2004-21264.6 MediumDecember 31, 2004
iss blackice pc protection, blackice agent server, blackice server protection +1 more +3 moreBuffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb,...CVE-2004-21254.6 MediumDecember 31, 2004
gallery project galleryThe register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers...CVE-2004-2124Public exploit5.0 MediumDecember 31, 2004
nextplace e-commerce asp engineMultiple cross-site scripting (XSS) vulnerabilities in Nextplace.com E-Commerce ASP Engine allow...CVE-2004-21234.3 MediumDecember 31, 2004
borland software web server for corel paradoxMultiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow...CVE-2004-2121Public exploit5.0 MediumDecember 31, 2004
tinyserverCross-site scripting (XSS) vulnerability in Tiny Server 1.1 allows remote attackers to inject...CVE-2004-2119Public exploit4.3 MediumDecember 31, 2004
tinyserverTiny Server 1.1 allows remote attackers to cause a denial of service (crash) via a GET request...CVE-2004-21185.0 MediumDecember 31, 2004
tinyserverDirectory traversal vulnerability in Tiny Server 1.1 allows remote attackers to read or download...CVE-2004-2116Public exploit5.0 MediumDecember 31, 2004
oracle http serverMultiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache...CVE-2004-2115Public exploitEPSS 58.4%6.8 MediumDecember 31, 2004
internetnow proxynowStack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers...CVE-2004-2114Public exploit10.0 HighDecember 31, 2004
herberlin bremsserverCross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject...CVE-2004-2113Public exploit4.3 MediumDecember 31, 2004
herberlin bremsserverDirectory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary...CVE-2004-2112Public exploit5.0 MediumDecember 31, 2004
solarwinds serv-u file serverStack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows...CVE-2004-2111Public exploitEPSS 86.9%8.5 HighDecember 31, 2004
phorumSQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to...CVE-2004-21107.5 HighDecember 31, 2004
quadcomm q-shopMultiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in...CVE-2004-21096.8 MediumDecember 31, 2004
quadcomm q-shopMultiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute...CVE-2004-21087.5 HighDecember 31, 2004
finjan software surfingateFinjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands...CVE-2004-2107Public exploit7.5 HighDecember 31, 2004
novell netwareNovell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via...CVE-2004-21065.0 MediumDecember 31, 2004
novell netwareThe webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to...CVE-2004-21055.0 MediumDecember 31, 2004
novell netwareNovell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive...CVE-2004-2104Public exploitEPSS 11.9%5.0 MediumDecember 31, 2004
novell netwareCross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0...CVE-2004-21034.3 MediumDecember 31, 2004
No product listedCross-site scripting (XSS) vulnerability in FREESCO 2.05, a modified version of thttpd, allows...CVE-2004-2102Public exploit4.3 MediumDecember 31, 2004
geovision geohttpserverThe sysinfo script in GeoHttpServer allows remote attackers to cause a denial of service (crash)...CVE-2004-21015.0 MediumDecember 31, 2004
geovision geohttpserverGeoHttpServer, when configured to authenticate users, allows remote attackers to bypass...CVE-2004-21005.0 MediumDecember 31, 2004
electronic arts need for speed hot pursuit 2Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier,...CVE-2004-2099Public exploit5.1 MediumDecember 31, 2004
native solutions tbe banner engineCross-site scripting (XSS) vulnerability in the banner engine (TBE) 5.0 allows remote attackers...CVE-2004-20984.3 MediumDecember 31, 2004
suse linuxMultiple scripts on SuSE Linux 9.0 allow local users to overwrite arbitrary files via a symlink...CVE-2004-20972.1 LowDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open