Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

crob ftp serverDirectory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside...CVE-2004-2309Public exploit2.1 LowDecember 31, 2004
cpanelCross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote...CVE-2004-2308Public exploit4.3 MediumDecember 31, 2004
microsoft internet explorer, windows xp +1 moreMicrosoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of...CVE-2004-2307EPSS 14.5%5.0 MediumDecember 31, 2004
sun solaris, sunos +1 moreSun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has...CVE-2004-23064.6 MediumDecember 31, 2004
broadcom etrust antivirus eeComputer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus...CVE-2004-23055.0 MediumDecember 31, 2004
cerulean studios trillian, trillian pro +1 moreInteger overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote...CVE-2004-23047.5 HighDecember 31, 2004
mtools mformatMTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and...CVE-2004-2303Public exploitFix available3.6 LowDecember 31, 2004
linux kernelRace condition in the sysfs_read_file and sysfs_write_file functions in Linux kernel before 2.6...CVE-2004-23022.6 LowDecember 31, 2004
No product listedEudora before 6.1.1 allows remote attackers to cause a denial of service (crash) via an e-mail...CVE-2004-23015.0 MediumDecember 31, 2004
ucd-snmpBuffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local...CVE-2004-23007.2 HighDecember 31, 2004
No product listedBuffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute...CVE-2004-2299Public exploitEPSS 10.2%7.5 HighDecember 31, 2004
novell internet messaging system, netmail +1 moreNovell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a...CVE-2004-22986.4 MediumDecember 31, 2004
francisco burzi php-nukeThe Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service ...CVE-2004-2297Public exploit5.0 MediumDecember 31, 2004
francisco burzi php-nukeThe preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows...CVE-2004-22965.0 MediumDecember 31, 2004
No product listedSQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers...CVE-2004-2295Public exploit7.5 HighDecember 31, 2004
francisco burzi php-nukeCanonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6...CVE-2004-2294Public exploit4.3 MediumDecember 31, 2004
francisco burzi php-nukeMultiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers...CVE-2004-2293Public exploit4.3 MediumDecember 31, 2004
alt-n mdaemonBuffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service ...CVE-2004-2292EPSS 12.2%5.0 MediumDecember 31, 2004
microsoft internet explorer, ie +1 moreMicrosoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code...CVE-2004-2291Public exploitEPSS 11.8%7.5 HighDecember 31, 2004
No product listedMicrosoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in...CVE-2004-22907.5 HighDecember 31, 2004
microsoft windows xpMicrosoft Windows XP Explorer allows local users to execute arbitrary code via a system folder...CVE-2004-2289Public exploitEPSS 23.7%10.0 HighDecember 31, 2004
jelsoft vbulletinCross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote...CVE-2004-2288Public exploit4.3 MediumDecember 31, 2004
dsm light web file browserDirectory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote...CVE-2004-2287Public exploit5.0 MediumDecember 31, 2004
activestate activeperl, larry wall perl +1 moreInteger overflow in the duplication operator in ActivePerl allows remote attackers to cause a...CVE-2004-2286Public exploit7.5 HighDecember 31, 2004
open webmail webmailThe read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows...CVE-2004-228410.0 HighDecember 31, 2004
daniel barron dansguardianUnknown vulnerability in DansGuardian before 2.6.1-13 allows remote attackers to bypass URL...CVE-2004-22835.0 MediumDecember 31, 2004
daniel barron dansguardianDansGuardian before 2.7.7-2 allows remote attackers to bypass URL filters via a ".." in the request.CVE-2004-22825.0 MediumDecember 31, 2004
ibm lotus notesMultiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5...CVE-2004-228110.0 HighDecember 31, 2004
ibm lotus notesBuffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote...CVE-2004-2280Public exploit5.0 MediumDecember 31, 2004
invision power services power boardCross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote...CVE-2004-22794.3 MediumDecember 31, 2004
chaogic systems vhostUnknown cross-site scripting (XSS) vulnerability in the web GUI in vHost before 3.10r1 has...CVE-2004-22784.3 MediumDecember 31, 2004
agsmBuffer overflow in aGSM Half-Life client allows remote Half-Life servers to cause a denial of...CVE-2004-2277Public exploit5.0 MediumDecember 31, 2004
No product listedF-Secure Anti-Virus 5.41 and 5.42 on Windows, Client Security 5.50 and 5.52, 4.60 for Samba...CVE-2004-22762.1 LowDecember 31, 2004
i-mall commerce i-mall.cgii-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell...CVE-2004-2275Public exploitEPSS 12.8%10.0 HighDecember 31, 2004
w3c jigsawUnknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly...CVE-2004-22746.4 MediumDecember 31, 2004
evan sims effingerdefFingerD 0.2.12 allows remote attackers to cause a denial of service (daemon crash) via a packet...CVE-2004-22735.0 MediumDecember 31, 2004
evan sims effingerdBuffer overflow in the sockFinger_DataArrival function in efFingerD 0.2.12 allows remote...CVE-2004-22725.0 MediumDecember 31, 2004
minishare minimal http serverBuffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code...CVE-2004-2271Public exploitEPSS 72.1%7.5 HighDecember 31, 2004
ibm parallel environmentUnknown vulnerability in IBM Parallel Environment (PE) 3.2 and 4.1 allows attackers to execute...CVE-2004-22707.2 HighDecember 31, 2004
pads DebianStack-based buffer overflow in pads.c in Passive Asset Detection System (Pads) might allow local...CVE-2004-2269Fix available7.2 HighDecember 31, 2004
pimentech pimengest2PimenGest2 before 1.1.1 allows remote attackers to obtain the database password via debug...CVE-2004-22685.0 MediumDecember 31, 2004
No product listedCross-site scripting (XSS) vulnerability in Ansel 2.1 and earlier allows remote attackers to...CVE-2004-22674.3 MediumDecember 31, 2004
anselSQL injection vulnerability in Ansel 2.1 and earlier allows remote attackers to modify SQL...CVE-2004-22667.5 HighDecember 31, 2004
uudeviewUUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown...CVE-2004-2265Fix available7.2 HighDecember 31, 2004
gnu less** DISPUTED ** Format string bug in the open_altfile function in filename.c for GNU less 382, 381...CVE-2004-2264Disputed6.4 MediumDecember 31, 2004
playsmsSQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier...CVE-2004-2263Public exploit7.5 HighDecember 31, 2004
e107ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which...CVE-2004-2262Public exploitEPSS 14.9%7.5 HighDecember 31, 2004
No product listedCross-site scripting (XSS) vulnerability in e107 allows remote attackers to inject arbitrary...CVE-2004-22614.3 MediumDecember 31, 2004
opera browserOpera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user...CVE-2004-22605.0 MediumDecember 31, 2004
beasts vsftpdvsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service (crash)...CVE-2004-2259Fix available5.0 MediumDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open