Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

hummingbird exceedXconfig in Hummingbird Exceed before 9.0.0.1, when the Screen Definition is password-protected,...CVE-2004-22582.1 LowDecember 31, 2004
phpmyfaqphpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images...CVE-2004-22575.0 MediumDecember 31, 2004
No product listedDirectory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read...CVE-2004-22565.0 MediumDecember 31, 2004
phpmyfaqDirectory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary...CVE-2004-22556.4 MediumDecember 31, 2004
netwin surgeldapSurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to...CVE-2004-2254Public exploit7.5 HighDecember 31, 2004
netwin surgeldapDirectory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote...CVE-2004-2253Public exploit5.0 MediumDecember 31, 2004
sophos astaro security linuxThe firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which...CVE-2004-22525.0 MediumDecember 31, 2004
astaro security linuxThe PPTP server in Astaro Security Linux before 4.024 provides information about its version,...CVE-2004-22515.0 MediumDecember 31, 2004
goosequill audienceconnect remoteeditorUnknown vulnerability in the "access code" in RemoteEditor before 0.1.6 has unknown impact and...CVE-2004-22507.5 HighDecember 31, 2004
goosequill audienceconnect secureeditorUnknown vulnerability in the "access code" in SecureEditor before 0.1.2 has unknown impact and...CVE-2004-22497.5 HighDecember 31, 2004
goosequill remoteeditorUnknown vulnerability in RemoteEditor before 0.1.1 has unknown impact and attack vectors, related...CVE-2004-224810.0 HighDecember 31, 2004
goosequill audienceconnectUnknown vulnerability in the "admin of paypal email addresses" in AudienceConnect before 1.0.beta...CVE-2004-224710.0 HighDecember 31, 2004
goolleryCross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to...CVE-2004-2246Public exploit4.3 MediumDecember 31, 2004
goolleryCross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject...CVE-2004-2245Public exploit4.3 MediumDecember 31, 2004
oracle application server, oracle9i +1 moreThe XML parser in Oracle 9i Application Server Release 2 9.0.3.0 and 9.0.3.1, 9.0.2.3 and earlier...CVE-2004-22445.0 MediumDecember 31, 2004
phorumPhorum allows remote attackers to hijack sessions of other users by stealing and replaying the...CVE-2004-22437.5 HighDecember 31, 2004
phorumCross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and earlier...CVE-2004-2242Public exploit4.3 MediumDecember 31, 2004
phorumCross-site scripting (XSS) vulnerability in Phorum 5.0.11 and earlier allows remote attackers to...CVE-2004-22414.3 MediumDecember 31, 2004
phorumMultiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to...CVE-2004-22407.5 HighDecember 31, 2004
No product listedBuffer overflow in vsybase.c in vpopmail 5.4.2 and earlier might allow attackers to cause a...CVE-2004-22397.5 HighDecember 31, 2004
No product listed** DISPUTED ** Format string vulnerability in vsybase.c in vpopmail 5.4.2 and earlier has unknown...CVE-2004-2238Disputed5.0 MediumDecember 31, 2004
moodleUnknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to ...CVE-2004-223710.0 HighDecember 31, 2004
moodleUnknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to...CVE-2004-223610.0 HighDecember 31, 2004
moodleUnknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to...CVE-2004-223510.0 HighDecember 31, 2004
No product listedUnknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators.CVE-2004-22347.5 HighDecember 31, 2004
moodleUnknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact...CVE-2004-223310.0 HighDecember 31, 2004
moodleSQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows...CVE-2004-22327.5 HighDecember 31, 2004
No product listedZero G Software InstallAnywhere 5.0.6, 5.0.7, and earlier allows local users to overwrite...CVE-2004-22311.2 LowDecember 31, 2004
openbsdHeap-based buffer overflow in isakmpd on OpenBSD 3.4 through 3.6 allows local users to cause a...CVE-2004-22302.1 LowDecember 31, 2004
oracle database server liteMultiple unknown vulnerabilities in Oracle 9i Lite Mobile Server 5.0.0.0.0 through 5.0.2.9.0...CVE-2004-22294.6 MediumDecember 31, 2004
No product listedMozilla Firefox before 1.0 is installed with world-writable permissions on Mac OS X, which allows...CVE-2004-22287.2 HighDecember 31, 2004
mozilla firefoxMozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes...CVE-2004-22275.0 MediumDecember 31, 2004
mozilla thunderbirdMozilla Mail 1.7.1 and 1.7.3, and Thunderbird before 0.9, when HTML-Mails is enabled, allows...CVE-2004-22265.0 MediumDecember 31, 2004
mozilla firefoxMozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download...CVE-2004-22255.0 MediumDecember 31, 2004
appfoundry message foundryAppfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service (crash...CVE-2004-22245.0 MediumDecember 31, 2004
fsphpgalleryFsPHPGallery before 1.2 allows remote attackers to cause a denial of service via an image with a...CVE-2004-22235.0 MediumDecember 31, 2004
No product listedDirectory traversal vulnerability in index.php in FsPHPGallery before 1.2 allows remote attackers...CVE-2004-22225.0 MediumDecember 31, 2004
mercantec softcartBuffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute...CVE-2004-2221Public exploitEPSS 34.8%7.5 HighDecember 31, 2004
f-secure anti-virusF-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31 does not properly detect certain...CVE-2004-22205.0 MediumDecember 31, 2004
microsoft ie, internet explorer +1 moreMicrosoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate...CVE-2004-22192.6 LowDecember 31, 2004
phpmywebhostingSQL injection vulnerability in pmwh.php in PHPMyWebHosting 0.3.4 and earlier allows remote...CVE-2004-2218Public exploit7.5 HighDecember 31, 2004
ychatMultiple unknown vulnerabilities in yhttpd in yChat before 0.7 allow remote attackers to cause a...CVE-2004-22175.0 MediumDecember 31, 2004
sun java system web server, java system application server +1 moreUnknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier,...CVE-2004-22165.0 MediumDecember 31, 2004
marc lehmann rxvt-unicodeRXVT-Unicode 3.4 and 3.5 does not properly close file descriptors, which allows local users to...CVE-2004-2215Fix available4.6 MediumDecember 31, 2004
mbedthis appweb http serverMbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions...CVE-2004-22149.8 CriticalDecember 31, 2004
mbedthis software appweb http serverMbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for...CVE-2004-22135.0 MediumDecember 31, 2004
alivesites forumSQL injection vulnerability in forum.asp in AliveSites Forums 2.0 allows remote attackers to...CVE-2004-22127.5 HighDecember 31, 2004
alivesites forumCross-site scripting (XSS) vulnerability in AliveSites Forums 2.0 allows remote attackers to...CVE-2004-22114.3 MediumDecember 31, 2004
express-web content management systemMultiple cross-site scripting (XSS) vulnerabilities in Express-Web Content Management System (CMS...CVE-2004-22104.3 MediumDecember 31, 2004
ideal science idealbbSQL injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers...CVE-2004-22097.5 HighDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open