Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

dell truemobile 1300 wlan mini-pci card util trayappletDell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM...CVE-2004-2359Public exploit10.0 HighDecember 31, 2004
No product listedCross-site scripting (XSS) vulnerability in admin_words.php for phpBB 2.0.6c allows remote...CVE-2004-23584.3 MediumDecember 31, 2004
proofpoint protection serverThe embedded MySQL 4.0 server for Proofpoint Protection Server does not require a password for...CVE-2004-23576.4 MediumDecember 31, 2004
fizmez web serverEarly termination vulnerability in Fizmez Web Server 1.0 allows remote attackers to cause a...CVE-2004-23565.0 MediumDecember 31, 2004
crafty syntax live help syntax live helpCross-site scripting (XSS) vulnerability in Crafty Syntax Live Help (CSLH) before 2.7.4 allows...CVE-2004-2355Public exploit4.3 MediumDecember 31, 2004
francisco burzi php-nuke, warpspeed 4nguestbook +1 moreSQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote...CVE-2004-23546.8 MediumDecember 31, 2004
No product listedBugPort before 1.099 stores its configuration file (conf/config.conf) under the web document root...CVE-2004-23535.0 MediumDecember 31, 2004
martin bauer gbookCross-site scripting (XSS) vulnerability in GBook for PHP-Nuke 1.0 allows remote attackers to...CVE-2004-23524.3 MediumDecember 31, 2004
martin bauer gbookCross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to...CVE-2004-23514.3 MediumDecember 31, 2004
phpbb group phpbbSQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to...CVE-2004-2350Public exploit7.5 HighDecember 31, 2004
tunezMultiple SQL injection vulnerabilities in Tunez before 1.20-pre2 allow remote attackers to...CVE-2004-23497.5 HighDecember 31, 2004
sybari antigenSybari AntiGen for Domino 7.0 Build 722 SR2 allows remote attackers to cause a denial of service ...CVE-2004-23485.0 MediumDecember 31, 2004
leif m. wright web blogblog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary...CVE-2004-2347Public exploit7.5 HighDecember 31, 2004
minihttpserver.net forum web serverMultiple cross-site scripting (XSS) vulnerabilities in Forum Web Server 1.6 and earlier allow...CVE-2004-23464.3 MediumDecember 31, 2004
oracle database serverUnknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0...CVE-2004-23456.5 MediumDecember 31, 2004
vocaltec vgw120 telephony gateway, vgw480 telephony gateway +1 moreUnknown vulnerability in the ASN.1/H.323/H.225 stack of VocalTec VGW120 and VGW480 allows remote...CVE-2004-2344Public exploit5.0 MediumDecember 31, 2004
apache http server** DISPUTED ** Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file...CVE-2004-2343Disputed7.2 HighDecember 31, 2004
No product listedChatterBox 2.0 allows remote attackers to cause a denial of service (server crash) via a...CVE-2004-23425.0 MediumDecember 31, 2004
No product listedPHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers...CVE-2004-23417.5 HighDecember 31, 2004
even balance punkbuster database** UNVERIFIABLE ** SQL injection vulnerability in PunkBuster Screenshot Database (PB-DB) Alpha 6...CVE-2004-23407.5 HighDecember 31, 2004
microsoft windows 2000, windows 2003 server, windows xp +2 more** DISPUTED ** Microsoft Windows 2000, XP, and possibly 2003 allows local users with the...CVE-2004-2339Disputed7.2 HighDecember 31, 2004
openbsdOpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian...CVE-2004-23387.5 HighDecember 31, 2004
inlookThe /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable...CVE-2004-23372.1 LowDecember 31, 2004
No product listedUnknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running...CVE-2004-23365.0 MediumDecember 31, 2004
macromedia contribute, studio +1 moreThe Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2...CVE-2004-23357.2 HighDecember 31, 2004
emumail emu webmailMultiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers...CVE-2004-2334Public exploit4.3 MediumDecember 31, 2004
bodingtonBodington 2.1.0 RC1 and earlier does not secure the file upload area, which allows remote...CVE-2004-23335.0 MediumDecember 31, 2004
cpan www formMultiple cross-site scripting (XSS) vulnerabilities in CPAN WWW::Form before 1.13 allow remote...CVE-2004-23324.3 MediumDecember 31, 2004
macromedia coldfusionColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and...CVE-2004-23315.5 MediumDecember 31, 2004
macromedia coldfusionColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP...CVE-2004-23305.0 MediumDecember 31, 2004
kerio personal firewallKerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM...CVE-2004-23297.2 HighDecember 31, 2004
clearswift mailsweeperClearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of...CVE-2004-23285.0 MediumDecember 31, 2004
vizer web server web serverVizer Web Server 1.9.1 allows remote attackers to cause a denial of service (crash) via multiple...CVE-2004-23275.0 MediumDecember 31, 2004
ip3 networks netaccess, netaccess - hospitality, netaccess - wireless hotspots +2 moreSQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows...CVE-2004-2326Public exploit7.5 HighDecember 31, 2004
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in EditModule.aspx for DotNetNuke (formerly IBuySpy...CVE-2004-23254.3 MediumDecember 31, 2004
dnnsoftware dotnetnukeSQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d...CVE-2004-23247.5 HighDecember 31, 2004
dnnsoftware dotnetnukeDotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain...CVE-2004-23235.0 MediumDecember 31, 2004
phpwebsiteSQL injection vulnerability in the (1) announce and (2) notes modules of phpWebSite before 0.9.3...CVE-2004-23227.5 HighDecember 31, 2004
bea weblogic serverBEA WebLogic Server and Express 8.1 SP1 and earlier allows local users in the Operator role to...CVE-2004-23212.1 LowDecember 31, 2004
bea weblogic serverThe default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and...CVE-2004-23205.8 MediumDecember 31, 2004
ibm informix dynamic server, informix extended parallel server +1 moreIBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite...CVE-2004-23193.6 LowDecember 31, 2004
No product listedThe administrative interface (surgeftpmgr.cgi) for SurgeFTP Server 1.0b through 2.2k1 allows...CVE-2004-23185.0 MediumDecember 31, 2004
mbedthis software appweb http serverInformation leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to...CVE-2004-23175.0 MediumDecember 31, 2004
No product listedMbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service ...CVE-2004-23165.0 MediumDecember 31, 2004
mbedthis software appweb http serverMbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service ...CVE-2004-23155.0 MediumDecember 31, 2004
novell ichainThe Telnet listener for Novell iChain Server before 2.2 Field Patch 3b 2.2.116 does not have a...CVE-2004-23147.5 HighDecember 31, 2004
inter7 sqwebmailInter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords...CVE-2004-2313Fix available5.0 MediumDecember 31, 2004
ibm aixBuffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain...CVE-2004-2312Public exploit7.2 HighDecember 31, 2004
ibm lotus dominoDirectory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to...CVE-2004-2311Public exploit3.6 LowDecember 31, 2004
ibm lotus dominoCross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote...CVE-2004-2310Public exploit4.3 MediumDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open