Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

stefan bambach mntdmntd_mount.c in mntd before 0.4.2 might allow local users to gain privileges via shell...CVE-2004-26104.6 MediumDecember 31, 2004
symantec powerquest deploycenterThe stuffit.com executable on Symantec PowerQuest DeployCenter 5.5 boot disks allows local users...CVE-2004-26092.1 LowDecember 31, 2004
smartwebby smart guest bookSmartWebby Smart Guest Book stores SmartGuestBook.mdb (aka the "news database") under the web...CVE-2004-26085.0 MediumDecember 31, 2004
linux kernelA numeric casting discrepancy in sdla_xfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29...CVE-2004-26072.1 LowDecember 31, 2004
linksys wrt54g, befsr41 v3 +1 moreThe Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled,...CVE-2004-26067.5 HighDecember 31, 2004
astatsaStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the...CVE-2004-26052.1 LowDecember 31, 2004
phproxyCross-site scripting (XSS) vulnerability in index.php in PHProxy allows remote attackers to...CVE-2004-26044.3 MediumDecember 31, 2004
ubertec help center liveCross-site scripting (XSS) vulnerability in the Search module in UberTec Help Center Live (HCL)...CVE-2004-26034.3 MediumDecember 31, 2004
ubertec help center livePHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) before 1.2.7 allows...CVE-2004-26026.8 MediumDecember 31, 2004
ubertec help center livePHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) allows remote attackers...CVE-2004-26016.4 MediumDecember 31, 2004
hp carrier grade server cc2300, carrier grade server cc3300, carrier grade server cc3310 +19 more +21 moreThe firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards...CVE-2004-26005.0 MediumDecember 31, 2004
No product listedMultiple buffer overflows in Quake II server before R1Q2, as used in multiple products, allow...CVE-2004-25992.1 LowDecember 31, 2004
No product listedQuake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the...CVE-2004-25985.0 MediumDecember 31, 2004
id software quake ii serverQuake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP...CVE-2004-25975.0 MediumDecember 31, 2004
id software quake ii serverQuake II server before R1Q2, as used in multiple products, allows remote attackers to cause a...CVE-2004-25965.0 MediumDecember 31, 2004
id software quake ii server linuxAbsolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in...CVE-2004-25955.0 MediumDecember 31, 2004
id software quake ii server windowsAbsolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in...CVE-2004-25945.0 MediumDecember 31, 2004
id software quake ii serverBuffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple...CVE-2004-25937.5 HighDecember 31, 2004
id software quake ii serverQuake II server before R1Q2, as used in multiple products, allows remote attackers to cause a...CVE-2004-2592Public exploit5.0 MediumDecember 31, 2004
No product listedThe data-overwrite capability of ButtUglySoftware CleanCache 2.19 does not properly overwrite...CVE-2004-25912.1 LowDecember 31, 2004
meindlsoft cute php libraryUnspecified vulnerability in meindlSOFT Cute PHP Library (aka cphplib) 0.46 has unknown impact...CVE-2004-259010.0 HighDecember 31, 2004
rob flynn gaimGaim before 0.82 allows remote servers to cause a denial of service (application crash) via a...CVE-2004-25895.0 MediumDecember 31, 2004
xmb software forumIntentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka...CVE-2004-25885.0 MediumDecember 31, 2004
smartertools smartermaillogin.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a...CVE-2004-25875.0 MediumDecember 31, 2004
smartertools smartermailDirectory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511...CVE-2004-25865.0 MediumDecember 31, 2004
smartertools smartermailCross-site scripting (XSS) vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511...CVE-2004-25854.3 MediumDecember 31, 2004
smartertools smartermailfrmAddfolder.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote authenticated...CVE-2004-25844.0 MediumDecember 31, 2004
smartertools smartermailSMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a...CVE-2004-25837.8 HighDecember 31, 2004
novell ichainNovell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers,...CVE-2004-25825.0 MediumDecember 31, 2004
novell ichainNovell iChain 2.3 allows attackers to cause a denial of service via a URL with a "specific string."CVE-2004-25815.0 MediumDecember 31, 2004
novell ichainCross-site scripting (XSS) vulnerability in Novell iChain 2.3 allows remote attackers to obtain...CVE-2004-25805.8 MediumDecember 31, 2004
novell ichainACLCHECK module in Novell iChain 2.3 allows attackers to bypass access control rules of an...CVE-2004-25797.5 HighDecember 31, 2004
phpgroupwarephpGroupWare before 0.9.16.002 transmits the (1) header admin and (2) setup passwords in...CVE-2004-25785.0 MediumDecember 31, 2004
phpgroupwareThe acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not...CVE-2004-25775.0 MediumDecember 31, 2004
phpgroupwareclass.vfs_dav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable...CVE-2004-25765.0 MediumDecember 31, 2004
phpgroupwarephpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a...CVE-2004-25755.0 MediumDecember 31, 2004
phpgroupwareCross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier...CVE-2004-2574Public exploit4.3 MediumDecember 31, 2004
phpgroupwarePHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and...CVE-2004-2573Public exploit7.5 HighDecember 31, 2004
amax information technologies magic winmail serverAMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering...CVE-2004-25725.0 MediumDecember 31, 2004
enderunix isoqlogMultiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary...CVE-2004-2571Fix available7.5 HighDecember 31, 2004
opera browserOpera before 7.54 allows remote attackers to modify properties and methods of the location object...CVE-2004-25705.0 MediumDecember 31, 2004
david stes ipmenuipmenu 0.0.3 before Debian GNU/Linux ipmenu_0.0.3-5 allows local users to overwrite arbitrary...CVE-2004-2569Fix available2.1 LowDecember 31, 2004
recipantsMultiple cross-site scripting (XSS) vulnerabilities in ReciPants 1.1.1 allow remote attackers to...CVE-2004-25684.3 MediumDecember 31, 2004
recipantsMultiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute...CVE-2004-25677.5 HighDecember 31, 2004
liveworld livechat, livefocusgroup, liveforum +1 more +3 moreMultiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1)...CVE-2004-2566Public exploit4.3 MediumDecember 31, 2004
sambar serverMultiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly...CVE-2004-2565Public exploit5.0 MediumDecember 31, 2004
sambar serverMultiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and...CVE-2004-2564Public exploit4.3 MediumDecember 31, 2004
serena software teamtrackSerena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names...CVE-2004-2563Public exploit5.8 MediumDecember 31, 2004
leigh business enterprises web helpdeskSQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk...CVE-2004-2562Public exploit7.5 HighDecember 31, 2004
internet sofware sciences web\+centerMultiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow...CVE-2004-2561Public exploit7.5 HighDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open