Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

ubbcentral ubb.threadsCross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows...CVE-2004-2510Public exploit4.3 MediumDecember 31, 2004
ubbcentral ubb.threadsCross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php...CVE-2004-2509Public exploit4.3 MediumDecember 31, 2004
linksys wvc11bCross-site scripting (XSS) vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video...CVE-2004-2508Public exploit4.3 MediumDecember 31, 2004
linksys wvc11bAbsolute path traversal vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video...CVE-2004-2507Public exploit5.0 MediumDecember 31, 2004
wikindxUnparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to...CVE-2004-25065.0 MediumDecember 31, 2004
macromedia coldfusionMacromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows...CVE-2004-2505Public exploit5.0 MediumDecember 31, 2004
alt-n mdaemonThe GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes...CVE-2004-25047.2 HighDecember 31, 2004
inweb mail serverINweb Mail Server 2.40 allows remote attackers to cause a denial of service (crash) via a large...CVE-2004-25035.0 MediumDecember 31, 2004
im-switchim-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a...CVE-2004-2502Public exploit2.1 LowDecember 31, 2004
mailenable enterprise, professional +1 moreBuffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise...CVE-2004-2501Public exploitEPSS 14.1%7.5 HighDecember 31, 2004
ilohamailUnknown vulnerability in IlohaMail before 0.8.14-rc1 has unknown impact and attack vectors.CVE-2004-250010.0 HighDecember 31, 2004
No product listedUnspecified vulnerability in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01...CVE-2004-24997.8 HighDecember 31, 2004
No product listedUnspecified vulnerability in the error handler in Hitachi Web Page Generator and Web Page...CVE-2004-24985.0 MediumDecember 31, 2004
hitachi web page generator, web page generator enterprise +1 moreCross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and...CVE-2004-24974.3 MediumDecember 31, 2004
No product listedThe HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of...CVE-2004-2496Public exploit7.8 HighDecember 31, 2004
code-crafters ability mail serverThe (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote...CVE-2004-24957.8 HighDecember 31, 2004
No product listedCross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote...CVE-2004-2494Public exploit4.3 MediumDecember 31, 2004
hitachi groupmax world wide web, groupmax world wide web desktop +1 moreDirectory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6,...CVE-2004-24934.0 MediumDecember 31, 2004
hitachi groupmax world wide web desktopCross-site scripting (XSS) vulnerability in Groupmax World Wide Web (GmaxWWW) Desktop 5, 6, and...CVE-2004-24924.3 MediumDecember 31, 2004
opera browserA race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar...CVE-2004-2491Public exploit2.6 LowDecember 31, 2004
ibm informix dynamic server, informix extended parallel server +1 moreBuffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to...CVE-2004-24904.6 MediumDecember 31, 2004
ibm informix dynamic serverFormat string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local...CVE-2004-24894.6 MediumDecember 31, 2004
No product listedDirectory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote...CVE-2004-24884.0 MediumDecember 31, 2004
No product listedDirectory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote...CVE-2004-2487Public exploit4.0 MediumDecember 31, 2004
dropbear ssh project sshThe DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which...CVE-2004-2486Fix available7.5 HighDecember 31, 2004
php live liveUnspecified vulnerability in PHP Live! before 2.8.2, due to a "major security problem," allows...CVE-2004-24855.0 MediumDecember 31, 2004
php gift registry phpgiftregCross-site scripting (XSS) vulnerability in PHP Gift Registry 1.3.5 and earlier allows remote...CVE-2004-24844.3 MediumDecember 31, 2004
kerio winroute firewallKerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries,...CVE-2004-24836.4 MediumDecember 31, 2004
microsoft outlookMicrosoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail...CVE-2004-2482EPSS 12.8%5.0 MediumDecember 31, 2004
myproxyMyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts...CVE-2004-24814.6 MediumDecember 31, 2004
national science foundation squid web proxy cacheSquid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access...CVE-2004-2480Public exploitFix available5.0 MediumDecember 31, 2004
national science foundation squid web proxy cacheSquid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs...CVE-2004-2479Fix available5.0 MediumDecember 31, 2004
ca unicenter web services distributed management, ibm trading partner interchange, jetty http server +2 moreUnspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange...CVE-2004-24787.5 HighDecember 31, 2004
diamondcs process guard freeDiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection...CVE-2004-24772.1 LowDecember 31, 2004
microsoft internet explorerMicrosoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite...CVE-2004-24762.6 LowDecember 31, 2004
google toolbarCross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to...CVE-2004-2475Public exploit4.3 MediumDecember 31, 2004
phpnewsSQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL...CVE-2004-24747.5 HighDecember 31, 2004
wmfrogwmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite...CVE-2004-24731.2 LowDecember 31, 2004
agnitum outpost firewallAgnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service (CPU...CVE-2004-24725.0 MediumDecember 31, 2004
jamesoff quoteengineSQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 allow remote...CVE-2004-24717.5 HighDecember 31, 2004
madbmsUnspecified vulnerability in MadBMS before 1.1.5 has unknown impact and attack vectors, related...CVE-2004-247010.0 HighDecember 31, 2004
brickhost phpscheduleitUnspecified vulnerability in Reservation.class.php for phpScheduleIt 1.01 and earlier allows...CVE-2004-24695.0 MediumDecember 31, 2004
scripts for educators sillysearchCross-site scripting (XSS) vulnerability in SillySearch 2.3 and earlier allows remote attackers...CVE-2004-24684.3 MediumDecember 31, 2004
efs software easy chat serverchat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users,...CVE-2004-24675.0 MediumDecember 31, 2004
efs software easy chat serverchat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server...CVE-2004-2466Public exploitEPSS 74.7%5.0 MediumDecember 31, 2004
efs software easy chat serverCross-site scripting (XSS) vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote...CVE-2004-24654.3 MediumDecember 31, 2004
ada imgsvrDirectory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to...CVE-2004-2464Public exploit5.0 MediumDecember 31, 2004
ada imgsvrBuffer overflow in ADA Image Server (ImgSvr) 0.4 allows remote attackers to cause a denial of...CVE-2004-24637.5 HighDecember 31, 2004
cplaycplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the...CVE-2004-24624.6 MediumDecember 31, 2004
gnu gnubiffBuffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service ...CVE-2004-2461Fix available7.5 HighDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open