Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

andreas gohr dokuwikiDokuWiki before 2004-10-19, when used on a web server that permits execution based on file...CVE-2004-25607.5 HighDecember 31, 2004
andreas gohr dokuwikiDokuWiki before 2004-10-19 allows remote attackers to access administrative functionality...CVE-2004-25597.5 HighDecember 31, 2004
ibm tivoli secureway policy director, websphere everyplace server, tivoli access manager for e-business +3 more +5 moreUnspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e...CVE-2004-25587.5 HighDecember 31, 2004
netgear wg602NetGear WG602 (aka WG602v1) Wireless Access Point 1.7.14 has a hardcoded account of username ...CVE-2004-25575.0 MediumDecember 31, 2004
netgear wg602NetGear WG602 (aka WG602v1) Wireless Access Point firmware 1.04.0 and 1.5.67 has a hardcoded...CVE-2004-25565.0 MediumDecember 31, 2004
smartstuff foolproof securityRiverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography ...CVE-2004-2555Public exploit2.1 LowDecember 31, 2004
novell client firewallNovell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to...CVE-2004-25547.2 HighDecember 31, 2004
the ignition project ignitionserverThe Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with...CVE-2004-25536.0 MediumDecember 31, 2004
tim mann xboardBuffer overflow in XBoard 4.2.7 and earlier might allow local users to execute arbitrary code via...CVE-2004-2552Fix available4.6 MediumDecember 31, 2004
layton technology helpboxMultiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute...CVE-2004-2551Public exploit7.5 HighDecember 31, 2004
xperience sandsurferMultiple cross-site scripting (XSS) vulnerabilities in unspecified Perl scripts in SandSurfer...CVE-2004-25504.3 MediumDecember 31, 2004
nortel wlan access point 2220, wlan access point 2221, wlan access point 2225 +2 moreNortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause...CVE-2004-2549Public exploitEPSS 10.5%5.0 MediumDecember 31, 2004
netwin surgemail, webmail +1 moreMultiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2)...CVE-2004-2548Public exploit4.3 MediumDecember 31, 2004
netwin surgemail, webmail +1 moreNetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive...CVE-2004-2547Public exploit2.6 LowDecember 31, 2004
samba, trustix secure linux +1 moreMultiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory...CVE-2004-2546Fix available6.4 MediumDecember 31, 2004
securecomputing sidewinder g2Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of...CVE-2004-25455.0 MediumDecember 31, 2004
securecomputing sidewinder g2Admin Console in Secure Computing Corporation Sidewinder G2 6.1.0.01 exports private keys when...CVE-2004-25442.1 LowDecember 31, 2004
securecomputing sidewinder g2Secure Computing Corporation Sidewinder G2 6.1.0.01 might allow remote attackers to cause a...CVE-2004-25435.0 MediumDecember 31, 2004
dynix webpacMultiple SQL injection vulnerabilities in Dynix (formerly known as epixtech) WebPAC allow remote...CVE-2004-25427.5 HighDecember 31, 2004
cscopeBuffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to...CVE-2004-2541Fix available6.9 MediumDecember 31, 2004
sun jre, jdk +1 morereadObject in (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.0...CVE-2004-25405.0 MediumDecember 31, 2004
network appliance data ontap, netcache +1 moreUnknown vulnerability in Network Appliance NetCache 5.2 and Data ONTAP 6.0 allows remote...CVE-2004-25397.8 HighDecember 31, 2004
nilesh dosooye phpcodegenieDirect static code injection vulnerability in the PCG simple application generation in...CVE-2004-25386.5 MediumDecember 31, 2004
netwin surgemailUnspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors,...CVE-2004-253710.0 HighDecember 31, 2004
linux kernelThe exit_thread function (process.c) in Linux kernel 2.6 through 2.6.5 does not invalidate the...CVE-2004-25367.5 HighDecember 31, 2004
matthew phillips stickerThe person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote...CVE-2004-25355.0 MediumDecember 31, 2004
fastream netfile serverFastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does...CVE-2004-2534Public exploit7.8 HighDecember 31, 2004
solarwinds serv-u file serverServ-U FTP Server 4.1 (possibly 4.0) allows remote attackers to cause a denial of service ...CVE-2004-25335.0 MediumDecember 31, 2004
solarwinds serv-u file serverServ-U FTP server before 5.1.0.0 has a default account and password for local administration,...CVE-2004-2532Public exploitEPSS 15.3%10.0 HighDecember 31, 2004
gnu gnutlsX.509 Certificate Signature Verification in Gnu transport layer security library (GnuTLS) 1.0.16...CVE-2004-25317.8 HighDecember 31, 2004
No product listedVisual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension...CVE-2004-2530Public exploit2.6 LowDecember 31, 2004
gadu-gadu instant messengerGadu-Gadu allows remote attackers to bypass the "image send" option by sending a very small image...CVE-2004-25295.0 MediumDecember 31, 2004
webcam corp watchdogCross-site scripting (XSS) vulnerability in sresult.exe in Webcam Watchdog 4.0.1a allows remote...CVE-2004-2528Public exploit4.3 MediumDecember 31, 2004
No product listedThe local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow...CVE-2004-25275.4 MediumDecember 31, 2004
ibm tivoli directory serverDirectory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier...CVE-2004-2526Public exploit5.0 MediumDecember 31, 2004
s9y serendipityCross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote...CVE-2004-25254.3 MediumDecember 31, 2004
whm autopilot autopilotclogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and earlier allows remote attackers to...CVE-2004-25245.0 MediumDecember 31, 2004
openftpd ftp serverFormat string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2...CVE-2004-2523Public exploit6.5 MediumDecember 31, 2004
geeos team gattaca server 2003Cross-site scripting (XSS) vulnerability in web.tmpl in Gattaca Server 2003 1.1.10.0 allows...CVE-2004-2522Public exploit4.3 MediumDecember 31, 2004
geeos team gattaca server 2003Mail server in Gattaca Server 2003 1.1.10.0 allows remote attackers to perform a denial of...CVE-2004-25215.0 MediumDecember 31, 2004
No product listedPOP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial...CVE-2004-2520Public exploit4.0 MediumDecember 31, 2004
geeos team gattaca server 2003Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service (CPU...CVE-2004-2519Public exploit5.0 MediumDecember 31, 2004
geeos team gattaca server 2003Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a...CVE-2004-2518Public exploit5.0 MediumDecember 31, 2004
myservermyServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST...CVE-2004-2517Public exploit5.0 MediumDecember 31, 2004
myserverDirectory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary...CVE-2004-2516Public exploit5.0 MediumDecember 31, 2004
vmware workstationFormat string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated...CVE-2004-25157.2 HighDecember 31, 2004
powerportalCross-site scripting (XSS) vulnerability in modules/private_messages/index.php in PowerPortal 1.x...CVE-2004-2514Public exploit4.3 MediumDecember 31, 2004
pmail pegasusBuffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to...CVE-2004-2513Public exploit10.0 HighDecember 31, 2004
codeworx technologies dcp-portalCRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote...CVE-2004-2512Public exploit4.3 MediumDecember 31, 2004
codeworx technologies dcp-portalMultiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote...CVE-2004-2511Public exploit4.3 MediumDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open