Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

ideal science idealbbCRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers...CVE-2004-22085.0 MediumDecember 31, 2004
ideal science idealbbCross-site scripting (XSS) vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows...CVE-2004-22074.3 MediumDecember 31, 2004
natterchatSQL injection vulnerability in NatterChat 1.12 allows remote attackers to execute arbitrary SQL...CVE-2004-22067.5 HighDecember 31, 2004
symantec veritas cluster serverUnknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to gain root...CVE-2004-22057.2 HighDecember 31, 2004
macromedia coldfusionMacromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject...CVE-2004-22047.2 HighDecember 31, 2004
anselAnsel 1.2 through 2.0 uses insecure default permissions, which allows remote attackers to gain...CVE-2004-22037.5 HighDecember 31, 2004
duware duclassifiedMultiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote...CVE-2004-2202Public exploit7.5 HighDecember 31, 2004
duware duforumSQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute...CVE-2004-2201Public exploit7.5 HighDecember 31, 2004
duware duforumCross-site scripting (XSS) vulnerability in DUware DUforum 3.0 through 3.1 allows remote...CVE-2004-22004.3 MediumDecember 31, 2004
duware duclassifiedCross-site scripting (XSS) vulnerability in DUware DUclassified 4.0 allows remote attackers to...CVE-2004-21994.3 MediumDecember 31, 2004
duware duclassmateaccount.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords...CVE-2004-2198Public exploit6.4 MediumDecember 31, 2004
kdockerkdocker.cpp in kdocker 0.1 through 0.8 does not properly check the ownership of files, which...CVE-2004-21977.2 HighDecember 31, 2004
zanfi solutions cms liteZanfi CMS lite 1.1 allows remote attackers to obtain the full path of the web server via direct...CVE-2004-21965.0 MediumDecember 31, 2004
zanfi solutions cms litePHP remote file inclusion vulnerability in index.php in Zanfi CMS lite 1.1 allows remote...CVE-2004-21955.0 MediumDecember 31, 2004
mailenable enterprise, professional +1 moreMailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote...CVE-2004-21945.0 MediumDecember 31, 2004
cjoverkillCross-site scripting (XSS) vulnerability in trade.php for CJOverkill 4.0.3 allows remote...CVE-2004-21934.3 MediumDecember 31, 2004
turbotraffictrader phpSQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows...CVE-2004-21927.5 HighDecember 31, 2004
turbotraffictrader phpCross-site scripting (XSS) vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0...CVE-2004-21914.3 MediumDecember 31, 2004
unzooDirectory traversal vulnerability in Unzoo 4.4-2 has unknown impact and attack vectors.CVE-2004-21905.0 MediumDecember 31, 2004
dmxready site chassis managerSQL injection vulnerability in DMXReady Site Chassis Manager allows remote attackers to execute...CVE-2004-21897.5 HighDecember 31, 2004
dmxready site chassis managerCross-site scripting (XSS) vulnerability in DMXReady Site Chassis Manager allows remote attackers...CVE-2004-21884.3 MediumDecember 31, 2004
mediawikiUnknown vulnerability in ImagePage for MediaWiki 1.3.5, related to "filename validation," has...CVE-2004-2187Fix available5.0 MediumDecember 31, 2004
mediawikiSQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers to execute arbitrary SQL...CVE-2004-2186Fix available7.5 HighDecember 31, 2004
mediawikiMultiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 allow remote attackers to...CVE-2004-2185Fix available6.8 MediumDecember 31, 2004
digicraft software yakDirectory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote...CVE-2004-2184Public exploit6.4 MediumDecember 31, 2004
wehelpbusUnknown vulnerability in WeHelpBUS 0.1 allows remote attackers to execute arbitrary shell...CVE-2004-21837.5 HighDecember 31, 2004
macromedia jrunSession fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user...CVE-2004-21827.5 HighDecember 31, 2004
wowbb web forumMultiple SQL injection vulnerabilities in WowBB Forum 1.61 allow remote attackers to execute...CVE-2004-2181Public exploit7.5 HighDecember 31, 2004
wowbb web forumMultiple cross-site scripting (XSS) vulnerabilities in WowBB Forum 1.61 allow remote attackers to...CVE-2004-21804.3 MediumDecember 31, 2004
microsoft frontpage, ie +1 moreasycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers...CVE-2004-2179EPSS 12.0%5.0 MediumDecember 31, 2004
devoybb web forumSQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute...CVE-2004-21787.5 HighDecember 31, 2004
devoybb web forumCross-site scripting (XSS) vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to...CVE-2004-21774.3 MediumDecember 31, 2004
microsoft windows xpThe Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to...CVE-2004-2176Public exploit4.6 MediumDecember 31, 2004
all enthusiast inc reviewpost php proMultiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute...CVE-2004-2175Public exploit7.5 HighDecember 31, 2004
early impact productcartCross-site scripting (XSS) vulnerability in Custva.asp in EarlyImpact ProductCart allows remote...CVE-2004-21744.3 MediumDecember 31, 2004
early impact productcartSQL injection vulnerability in advSearch_h.asp in EarlyImpact ProductCart allows remote attackers...CVE-2004-21737.5 HighDecember 31, 2004
netsourcecommerce productcartEarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote...CVE-2004-2172Public exploit7.5 HighDecember 31, 2004
cherokee httpdCross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to...CVE-2004-2171Public exploit4.3 MediumDecember 31, 2004
niti telecom caravan business serverDirectory traversal vulnerability in sample_showcode.html in Caravan 2.00/03d and earlier allows...CVE-2004-2170Public exploit5.0 MediumDecember 31, 2004
a-a-s application access server application access serverApplication Access Server (A-A-S) 1.0.37 and earlier allows remote authenticated users to cause a...CVE-2004-21692.1 LowDecember 31, 2004
baardsen software basomail serverBaSoMail 1.24 allows remote attackers to cause a denial of service (CPU consumption) via multiple...CVE-2004-21685.0 MediumDecember 31, 2004
latex2rtfMultiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote...CVE-2004-2167Public exploitFix availableEPSS 14.3%7.5 HighDecember 31, 2004
canon imagerunner 5000i, imagerunner c3200 +1 moreThe print-from-email feature in the Canon ImageRUNNER (iR) 5000i and C3200 digital printer, when...CVE-2004-21667.5 HighDecember 31, 2004
impressions games lords of the realm iiiLords of the Realm III 1.01 and earlier, when in the lobby stage, allows remote attackers to...CVE-2004-21655.0 MediumDecember 31, 2004
virtual programming vp-aspshoprestoreorder.asp in VP-ASP 5.0 does not close the database connection when a user restores a...CVE-2004-21645.0 MediumDecember 31, 2004
openbsdlogin_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret...CVE-2004-21637.5 HighDecember 31, 2004
tutosMultiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject...CVE-2004-2162Public exploit4.3 MediumDecember 31, 2004
tutosSQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute...CVE-2004-2161Public exploit7.5 HighDecember 31, 2004
xmlstarlet command line xml toolkitFormat string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow...CVE-2004-2160Fix available6.4 MediumDecember 31, 2004
xmlstarlet command line xml toolkitMultiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and...CVE-2004-2159Fix available10.0 HighDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open