Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

samhain labs samhainUnknown vulnerability in sh_hash_compdata for Samhain 1.8.9 through 2.0.1 might allow attackers...CVE-2004-2410Fix available2.1 LowDecember 31, 2004
samhain labs samhainBuffer overflow in the sh_hash_compdata function for Samhain 1.8.9 through 2.0.1, when running in...CVE-2004-2409Fix available7.2 HighDecember 31, 2004
vserver linux-vserverLinux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions...CVE-2004-24083.6 LowDecember 31, 2004
phpgroupwareUnknown vulnerability in phpGroupWare before 0.9.14.002 has unknown attack vectors and impact,...CVE-2004-240710.0 HighDecember 31, 2004
phpgroupwareUnknown "overflow" in the phpgw_config table for phpGroupWare before 0.9.14.002 has unknown...CVE-2004-240610.0 HighDecember 31, 2004
f-secure anti-virus, for firewalls, internet security +1 more +3 moreBuffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and...CVE-2004-24056.4 MediumDecember 31, 2004
yabbCross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers...CVE-2004-240310.0 HighDecember 31, 2004
yabbCross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote...CVE-2004-24024.3 MediumDecember 31, 2004
ipswitch imail expressStack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow...CVE-2004-24017.5 HighDecember 31, 2004
winftp server serverWinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file...CVE-2004-24002.1 LowDecember 31, 2004
securecomputing sidewinder g2Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of...CVE-2004-23995.0 MediumDecember 31, 2004
netenberg fantastico de luxeNetenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames,...CVE-2004-23982.1 LowDecember 31, 2004
broadcom bluecoat security gatewayThe web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1,...CVE-2004-23977.5 HighDecember 31, 2004
No product listedpasswd 0.68 does not check the return code for the pam_start function, which has unknown impact...CVE-2004-23967.2 HighDecember 31, 2004
mandrakesoft mandrake linux, mandrake linux corporate server, mandrake multi network firewall +2 moreMemory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption)...CVE-2004-23952.1 LowDecember 31, 2004
mandrakesoft mandrake linux, mandrake linux corporate server, mandrake multi network firewall +2 moreOff-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use...CVE-2004-23942.1 LowDecember 31, 2004
sun jsseJava Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the...CVE-2004-23937.5 HighDecember 31, 2004
mandrakesoft mandrake linux, mandrake linux corporate server +1 morelibuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via...CVE-2004-23925.0 MediumDecember 31, 2004
jabberstudio jabber gadu-gadu transportJabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote...CVE-2004-23915.0 MediumDecember 31, 2004
jabberstudio jabber gadu-gadu transportThe roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x...CVE-2004-23905.0 MediumDecember 31, 2004
jabberstudio jabber gadu-gadu transportUnknown vulnerability in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0...CVE-2004-23895.0 MediumDecember 31, 2004
ibm aixrexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling...CVE-2004-238810.0 HighDecember 31, 2004
denis sbragion sredird, peter astrand sercd +1 moreBuffer overflow in the HandleCPCCommand function of sercd before 2.3.1 and sredird 2.2.1 and...CVE-2004-2387Fix available7.5 HighDecember 31, 2004
denis sbragion sredird, peter astrand sercd +1 moreFormat string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and...CVE-2004-2386Fix available7.5 HighDecember 31, 2004
emumail emu webmailEMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory)...CVE-2004-2385Public exploit5.0 MediumDecember 31, 2004
nullsoft winampNullSoft Winamp 5.02 allows remote attackers to cause a denial of service (crash) by creating a...CVE-2004-23845.0 MediumDecember 31, 2004
microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame...CVE-2004-2383Public exploitEPSS 20.0%5.1 MediumDecember 31, 2004
perfectnavThe PerfectNav plugin for Microsoft Internet Explorer allows remote attackers to cause a denial...CVE-2004-23825.0 MediumDecember 31, 2004
jetty http serverJetty HTTP Server Denial of Service vulnerabilityCVE-2004-2381Fix available5.0 MediumDecember 31, 2004
twilight utilities web serverDirectory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0...CVE-2004-23805.0 MediumDecember 31, 2004
calacode at mail webmail systemMultiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote...CVE-2004-23794.3 MediumDecember 31, 2004
calacode at mail webmail system@Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server)...CVE-2004-23785.0 MediumDecember 31, 2004
alcatel omniswitch, omniswitch 7800 +1 moreAlcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot)...CVE-2004-23775.0 MediumDecember 31, 2004
twilight utilities web serverBuffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers...CVE-2004-23767.5 HighDecember 31, 2004
1st class internet solutions class mail serverBuffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause...CVE-2004-2375Public exploit7.5 HighDecember 31, 2004
working resources inc. badblueBadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a...CVE-2004-2374Public exploit5.0 MediumDecember 31, 2004
aol instant messengerThe Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable...CVE-2004-2373Public exploit7.5 HighDecember 31, 2004
bochs project bochsBuffer overflow in Bochs before 2.1.1, if installed setuid, allows local users to execute...CVE-2004-2372Fix available7.2 HighDecember 31, 2004
redstorm desert siege, ghost recon, the sum of all fears +2 moreMultiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The...CVE-2004-2371Public exploit5.0 MediumDecember 31, 2004
cerulean studios trillian, trillian pro +1 moreStack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01...CVE-2004-23707.5 HighDecember 31, 2004
ibm lotus dominoDirectory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to...CVE-2004-23696.4 MediumDecember 31, 2004
No product listedPHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to...CVE-2004-2368Public exploit7.5 HighDecember 31, 2004
No product listedThe Control Panel applet in WFTPD and WFTPD Pro 3.21 R1 and R2 allows remote authenticated users...CVE-2004-2367Public exploit5.0 MediumDecember 31, 2004
globalscape secure ftp serverBuffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2 allows remote attackers to...CVE-2004-2366Public exploit5.0 MediumDecember 31, 2004
microsoft windows xp, windows 2003 server +1 moreMemory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial...CVE-2004-23652.1 LowDecember 31, 2004
phpxCross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers...CVE-2004-2364Public exploitEPSS 10.7%5.0 MediumDecember 31, 2004
phpxValidate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX...CVE-2004-2363Public exploit4.3 MediumDecember 31, 2004
phpxPHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or...CVE-2004-23625.0 MediumDecember 31, 2004
No product listedDigital Reality game engine, as used in Haegemonia 1.0 through 1.0.7 and Desert Rats vs. Afrika...CVE-2004-23615.0 MediumDecember 31, 2004
targem games battle magesTargem Battle Mages 1.0 allows remote attackers to cause a denial of service (infinite loop) via...CVE-2004-2360Public exploit5.0 MediumDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open