Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

gnu gnubiffUnknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial...CVE-2004-2460Fix available5.0 MediumDecember 31, 2004
gnu gnubiffUnknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords,...CVE-2004-2459Fix available2.1 LowDecember 31, 2004
open webmail webmailOpen WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled,...CVE-2004-24585.0 MediumDecember 31, 2004
3com 3crwe754g72-aUnspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause...CVE-2004-24575.0 MediumDecember 31, 2004
minibbSQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to...CVE-2004-2456Public exploit7.5 HighDecember 31, 2004
sweex wireless broadband router accesspoint 802.11gSweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain...CVE-2004-24557.5 HighDecember 31, 2004
amsnaMSN 0.90 for Microsoft Windows allows local users to obtain sensitive information such as hashed...CVE-2004-24542.1 LowDecember 31, 2004
tutti nova novaUnknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is...CVE-2004-245310.0 HighDecember 31, 2004
No product listedUnknown vulnerability in Hitachi Cosminexus Portal Framework 01-00, 01-01, 01-02, 02-01, 02-02,...CVE-2004-24525.0 MediumDecember 31, 2004
No product listedRoger Wilco 1.4.1.6 and earlier, or Roger Wilco Base Station 0.30a or earlier, allows remote...CVE-2004-2451Public exploit5.0 MediumDecember 31, 2004
gamespy roger wilco, roger wilco dedicated server, roger wilco graphical server +1 more +3 moreThe client and server for Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and...CVE-2004-24505.0 MediumDecember 31, 2004
gamespy roger wilco dedicated server, roger wilco graphical server +1 moreRoger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote...CVE-2004-2449Public exploit5.0 MediumDecember 31, 2004
cassiopeia s-mart shopping cart, itransact redicart +1 moreS-Mart Shopping Cart or RediCart 3.9.5b stores smart.cfg under the web document root with...CVE-2004-24485.0 MediumDecember 31, 2004
1st class internet solutions class mail serverCross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to...CVE-2004-2447Public exploit4.3 MediumDecember 31, 2004
1st class internet solutions class mail serverDirectory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read...CVE-2004-24465.0 MediumDecember 31, 2004
jawsDirectory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view...CVE-2004-2445Public exploit5.0 MediumDecember 31, 2004
jawsCross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to...CVE-2004-2444Public exploit4.3 MediumDecember 31, 2004
jawsJaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php...CVE-2004-2443Public exploit7.5 HighDecember 31, 2004
f-secure anti-virus, for firewalls, internet security +2 more +4 moreMultiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43...CVE-2004-2442Public exploitEPSS 10.6%5.0 MediumDecember 31, 2004
kerio mailserverUnspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote...CVE-2004-244110.0 HighDecember 31, 2004
proxytunnelUnspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to...CVE-2004-2440Fix available2.1 LowDecember 31, 2004
hp laserjet 4200, color laserjet, color laserjet 4600 +14 more +16 moreThe remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password,...CVE-2004-24395.0 MediumDecember 31, 2004
php fusion fusionCross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject...CVE-2004-24384.3 MediumDecember 31, 2004
php fusion fusionSQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL...CVE-2004-24377.5 HighDecember 31, 2004
broadcom common services, unicenter network and systems management, unicenter serviceplus service desk +2 moreComputer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password...CVE-2004-24362.1 LowDecember 31, 2004
peoplesoft hrmsCross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7...CVE-2004-24354.3 MediumDecember 31, 2004
microsoft ieMicrosoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser...CVE-2004-2434Public exploitEPSS 32.8%5.0 MediumDecember 31, 2004
altnet download manager, kazaa media desktop, grokster +2 moreBuffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download...CVE-2004-24337.5 HighDecember 31, 2004
No product listedWinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service (crash) via a...CVE-2004-24325.0 MediumDecember 31, 2004
the ignition project ignitionserverUnknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1, with the...CVE-2004-24317.5 HighDecember 31, 2004
trend micro officescanTrend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening...CVE-2004-24307.2 HighDecember 31, 2004
No product listedMultiple stack-based and heap-based buffer overflows in EnderUNIX spamGuard before 1.7-BETA allow...CVE-2004-24297.5 HighDecember 31, 2004
abczone.it wwwguestbookAbczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient...CVE-2004-24285.0 MediumDecember 31, 2004
axis 2100 network camera, 2110 network camera, 2120 network camera +11 more +13 moreAxis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers...CVE-2004-242710.0 HighDecember 31, 2004
axis 2100 network camera, 2110 network camera, 2120 network camera +11 more +13 moreDirectory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12...CVE-2004-24265.0 MediumDecember 31, 2004
axis 2100 network camera, 2110 network camera, 2120 network camera +11 more +13 moreAxis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers...CVE-2004-2425Public exploitEPSS 13.5%7.5 HighDecember 31, 2004
bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a...CVE-2004-24245.0 MediumDecember 31, 2004
ipswitch imailUnknown vulnerability in the Web calendaring component of Ipswitch IMail Server before 8.13...CVE-2004-24235.0 MediumDecember 31, 2004
ipswitch imailMultiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial...CVE-2004-24225.0 MediumDecember 31, 2004
hitachi jp1 p-1b41-9461, jp1 p-1b41-9471, jp1 p-1j41-9471 +2 moreUnknown vulnerability in Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6...CVE-2004-242110.0 HighDecember 31, 2004
hitachi jp1 p-1b41-9461, jp1 p-1b41-9471, jp1 p-1j41-9471 +2 moreHitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6 and 7 allows remote...CVE-2004-24205.0 MediumDecember 31, 2004
No product listedKeene Digital Media Server 1.0.2 allows local users to obtain usernames and passwords by reading...CVE-2004-24192.1 LowDecember 31, 2004
whitsoft development slimftpdBuffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a...CVE-2004-2418Public exploit7.2 HighDecember 31, 2004
smtp.proxyFormat string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to...CVE-2004-24177.5 HighDecember 31, 2004
youngzsoft ccproxyBuffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary...CVE-2004-2416Public exploitEPSS 60.6%7.5 HighDecember 31, 2004
davenportDavenport before 0.9.10 allows attackers to cause a denial of service (resource consumption) via ...CVE-2004-24155.0 MediumDecember 31, 2004
novell netwareNovell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a...CVE-2004-24142.1 LowDecember 31, 2004
virtual programming vp-aspSQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to...CVE-2004-2413Public exploit7.5 HighDecember 31, 2004
virtual programming vp-aspMultiple SQL injection vulnerabilities in VP-ASP Shopping Cart 4.0 through 5.0 allow remote...CVE-2004-24127.5 HighDecember 31, 2004
virtual programming vp-aspThe CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not...CVE-2004-2411Public exploit4.3 MediumDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open