Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

linux kernelMemory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a...CVE-2004-26604.9 MediumDecember 31, 2004
mozilla, opera browser +1 moreOpera offers an Open button to verify that a user wishes to execute a downloaded file, which...CVE-2004-26594.0 MediumDecember 31, 2004
suse linuxresmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to...CVE-2004-26582.1 LowDecember 31, 2004
mozilla firefox** DISPUTED ** Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of...CVE-2004-2657Disputed1.7 LowDecember 31, 2004
open source development network slashcodeMultiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling...CVE-2004-26564.3 MediumDecember 31, 2004
xscreensaverrdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and...CVE-2004-2655Fix available5.4 MediumDecember 31, 2004
squidThe clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows...CVE-2004-2654Fix available5.0 MediumDecember 31, 2004
pd9 software megabbsUnspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain privileges...CVE-2004-26537.5 HighDecember 31, 2004
sourcefire snortThe DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options...CVE-2004-2652Public exploitEPSS 11.2%7.8 HighDecember 31, 2004
michael christen yacyMultiple cross-site scripting (XSS) vulnerabilities in YaCy before 0.32 allow remote attackers to...CVE-2004-26514.3 MediumDecember 31, 2004
apache jamesApache James Denial of ServiceCVE-2004-2650Fix available4.9 MediumDecember 31, 2004
eudoraEudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting...CVE-2004-2649Public exploit5.8 MediumDecember 31, 2004
No product listedFreezeX 1.00.100.0666 allows local users with administrator privileges to cause a denial of...CVE-2004-26481.0 LowDecember 31, 2004
No product listedFree Web Chat 2.0 allows remote attackers to cause a denial of service (CPU consumption) via...CVE-2004-2647Public exploit5.0 MediumDecember 31, 2004
No product listedThe addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a...CVE-2004-2646Public exploit5.0 MediumDecember 31, 2004
asn.1 compiler compilerUnspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack...CVE-2004-264510.0 HighDecember 31, 2004
asn.1 compiler compilerUnspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack...CVE-2004-264410.0 HighDecember 31, 2004
microsoft cabarcDirectory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files...CVE-2004-26433.7 LowDecember 31, 2004
nathaniel bray yeempYeemp 0.9.9 and earlier does not properly encrypt inbound files, which allows remote attackers to...CVE-2004-26426.4 MediumDecember 31, 2004
sun netra 1280, fire +1 moreUnspecified vulnerability in Sun Fire 3800/4800/4810/6800, Sun Fire V1280, and Netra 1280 allows...CVE-2004-26415.0 MediumDecember 31, 2004
No product listedDirectory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers...CVE-2004-2640Public exploit5.0 MediumDecember 31, 2004
drew withers journalnessUnspecified vulnerability in Journalness 3.0.7 and earlier allows remote attackers to create or...CVE-2004-26397.5 HighDecember 31, 2004
oscommerceThe Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files...CVE-2004-26387.5 HighDecember 31, 2004
zonet zsr1104we wireless router runtime codeThe NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP...CVE-2004-26376.4 MediumDecember 31, 2004
No product listedTinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL.CVE-2004-2636Public exploit5.0 MediumDecember 31, 2004
mcafee security installer control systemAn ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers...CVE-2004-26357.5 HighDecember 31, 2004
No product listedThe (1) bos.rte.serv_aid or (2) bos.rte.console filesets in IBM AIX 5.1 and 5.2 allow local users...CVE-2004-26346.2 MediumDecember 31, 2004
arjohn kampman sesame rdf containerUnspecified vulnerability in Sesamie 1.0 allows remote anonymous attackers to gain access to...CVE-2004-26335.1 MediumDecember 31, 2004
phpmyadminphpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain...CVE-2004-2632Fix available7.5 HighDecember 31, 2004
phpmyadminEval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is...CVE-2004-2631Public exploitFix available7.5 HighDecember 31, 2004
phpmyadminThe MIME transformation system (transformations/text_plain__external.inc.php) in phpMyAdmin 2.5.0...CVE-2004-2630Fix available7.5 HighDecember 31, 2004
first virtual communications click to meet express, click to meet premier, conference server +1 more +3 moreMultiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications...CVE-2004-26297.8 HighDecember 31, 2004
acme labs thttpdMultiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows,...CVE-2004-2628Public exploit5.0 MediumDecember 31, 2004
No product listedJava 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to...CVE-2004-262710.0 HighDecember 31, 2004
siemens s55GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers...CVE-2004-2626Public exploit3.7 LowDecember 31, 2004
outblaze emailCross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject...CVE-2004-2625Public exploit5.1 MediumDecember 31, 2004
wackowikiCross-site scripting (XSS) vulnerability in "TextSearch" in WackoWiki 3.5 allows remote attackers...CVE-2004-26244.3 MediumDecember 31, 2004
matthew skala rippy the aggregatorUnknown vulnerability in Rippy the Aggregator before 0.10, when register_globals is enabled, has...CVE-2004-262310.0 HighDecember 31, 2004
altiris deployment server extension for ibm directorAClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the...CVE-2004-262210.0 HighDecember 31, 2004
nortel contivityNortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does...CVE-2004-26214.0 MediumDecember 31, 2004
paul l daniels ripmimeThe MIMEH_read_headers function in ripMIME 1.3.1.0 does not properly handle trailing "\r" and "\n...CVE-2004-26205.0 MediumDecember 31, 2004
paul l daniels ripmimeripMIME 1.3.2.3 and earlier allows remote attackers to bypass e-mail protection via a base64 MIME...CVE-2004-26197.5 HighDecember 31, 2004
pegasi web server web serverCross-site scripting (XSS) vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers...CVE-2004-2618Public exploit4.3 MediumDecember 31, 2004
pegasi web server web serverDirectory traversal vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to...CVE-2004-2617Public exploit5.0 MediumDecember 31, 2004
onnuri infotek activepost standardThe file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to...CVE-2004-26164.0 MediumDecember 31, 2004
cutephp cutenewsThe documentation for CuteNews 1.3.6 and possibly other versions specifies that files under...CVE-2004-26154.6 MediumDecember 31, 2004
xuebrothers mywebBuffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service (crash) and...CVE-2004-2614Public exploit7.5 HighDecember 31, 2004
vserver linux-vserverUnspecified vulnerability in procfs in the Linux-VServer stable branch for the 2.4 kernel before...CVE-2004-261310.0 HighDecember 31, 2004
bncBNC 2.9.0 only grants access when an incorrect password is provided, which allows remote...CVE-2004-26127.5 HighDecember 31, 2004
steven schaefer sophsterThe Change Permissions function in the Sophster suite before 0.9.6 28 May 2004 (aka 0.9.6-r5),...CVE-2004-26114.6 MediumDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open