Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2004
December

CVEs published in December 2004

1,341 vulnerabilities, 159 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

phrozensmoke gyach enhancedMultiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.3 allow remote attackers to...CVE-2004-27107.5 HighDecember 31, 2004
phrozensmoke gyach enhancedBuffer overflow in the strip_html_tags method for Gyach Enhanced (Gyach-E) before 1.0.4 allows...CVE-2004-27097.5 HighDecember 31, 2004
phrozensmoke gyach enhancedGyach Enhanced (Gyach-E) before 1.0.0 stores passwords in plaintext, which allows attackers to...CVE-2004-27085.0 MediumDecember 31, 2004
phrozensmoke gyach enhancedMultiple unspecified vulnerabilities in Gyach Enhanced (Gyach-E) before 1.0.5 have unknown impact...CVE-2004-27077.5 HighDecember 31, 2004
phrozensmoke gyach enhancedUnspecified vulnerability in Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to...CVE-2004-27065.0 MediumDecember 31, 2004
pvpgnUnspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote...CVE-2004-2705Fix available5.0 MediumDecember 31, 2004
hastymail, microsoft internet explorer +1 moreHastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) does not send the ...CVE-2004-27044.3 MediumDecember 31, 2004
clearswift mailsweeper business suite i, mailsweeper for smtp, mailsweeper business suite ii +1 more +3 moreClearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or...CVE-2004-27034.3 MediumDecember 31, 2004
swsoft pleskCross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 and 7.1 Reloaded allows...CVE-2004-2702Public exploit4.3 MediumDecember 31, 2004
aspdotnetstorefrontCross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote...CVE-2004-2701Public exploit4.3 MediumDecember 31, 2004
aspdotnetstorefrontUnrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated...CVE-2004-27009.0 HighDecember 31, 2004
aspdotnetstorefrontdeleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product...CVE-2004-2699Public exploit4.3 MediumDecember 31, 2004
imwheelRace condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local...CVE-2004-2698Public exploitFix available6.9 MediumDecember 31, 2004
ibm aixThe Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users...CVE-2004-2697Public exploit6.9 MediumDecember 31, 2004
bea weblogic serverBEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation ...CVE-2004-26965.5 MediumDecember 31, 2004
jelsoft vbulletin, point-to-point protocol project protocol +1 moreSQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in...CVE-2004-26957.5 HighDecember 31, 2004
microsoft outlook expressMicrosoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions,...CVE-2004-26945.8 MediumDecember 31, 2004
hp hp-uxHP-UX B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed uses insecure directory...CVE-2004-26937.2 HighDecember 31, 2004
kyberdigi labs php-exec-dirThe exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote...CVE-2004-2692Public exploit9.3 HighDecember 31, 2004
3com 3c17205-us, 3c17210-us, superstack 3 switch +2 moreUnspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31...CVE-2004-2691EPSS 39.1%7.1 HighDecember 31, 2004
newsphpUnrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote...CVE-2004-26908.5 HighDecember 31, 2004
newsphpNewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to...CVE-2004-268910.0 HighDecember 31, 2004
newsphpCross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to...CVE-2004-26884.3 MediumDecember 31, 2004
apple xcode, samba +1 moredistcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server...CVE-2004-2687Public exploitFix availableEPSS 87.4%9.3 HighDecember 31, 2004
sun solaris, sunos +1 moreDirectory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows...CVE-2004-2686Public exploit7.2 HighDecember 31, 2004
youngzsoft ccproxyBuffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute...CVE-2004-2685Public exploitEPSS 10.7%7.5 HighDecember 31, 2004
intersystems cache databaseUnspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows attackers to...CVE-2004-26842.1 LowDecember 31, 2004
intersystems cacheUnspecified vulnerability in the %XML.Utils.SchemaServer class in InterSystems Cache' 5.0 allows...CVE-2004-26832.1 LowDecember 31, 2004
peersec networks matrixsslPeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent...CVE-2004-26825.8 MediumDecember 31, 2004
peersec networks matrixsslPeerSec MatrixSSL before 1.1 caches session keys for an indefinitely long time, which might make...CVE-2004-26817.5 HighDecember 31, 2004
apache mod pythonmod_python (libapache2-mod-python) 3.1.4 and earlier does not properly handle when output filters...CVE-2004-2680Fix available5.0 MediumDecember 31, 2004
checkpoint firewall-1Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially...CVE-2004-26797.8 HighDecember 31, 2004
hp tru64Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when...CVE-2004-26785.1 MediumDecember 31, 2004
qwikmail smtpFormat string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows...CVE-2004-2677Public exploit7.5 HighDecember 31, 2004
webroot software spy sweeper enterpriseThe Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not...CVE-2004-26767.2 HighDecember 31, 2004
argosoft ftp serverArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service...CVE-2004-2675Public exploit6.8 MediumDecember 31, 2004
argosoft ftp serverDirectory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote...CVE-2004-26746.8 MediumDecember 31, 2004
argosoft ftp serverMultiple buffer overflows in ArGoSoft FTP Server before 1.4.1.6 allow remote authenticated users...CVE-2004-26739.0 HighDecember 31, 2004
argosoft ftp serverUnspecified vulnerability in ArGoSoft FTP server before 1.4.2.2 allows attackers to upload .lnk...CVE-2004-26727.5 HighDecember 31, 2004
endonesiamod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain...CVE-2004-26715.0 MediumDecember 31, 2004
endonesiaMultiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote...CVE-2004-2670Public exploit6.8 MediumDecember 31, 2004
neocrome land down underMultiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to...CVE-2004-26697.5 HighDecember 31, 2004
No product listedSQL injection vulnerability in Interchange before 4.8.9 allows remote attackers to execute...CVE-2004-26687.5 HighDecember 31, 2004
No product listedCross-site scripting (XSS) vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5...CVE-2004-26676.8 MediumDecember 31, 2004
mantisMantis before 20041016 provides a complete Issue History (Bug History) in the web interface...CVE-2004-26665.0 MediumDecember 31, 2004
hp hp-uxUnspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport software in...CVE-2004-26654.9 MediumDecember 31, 2004
john lim adodbJohn Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive...CVE-2004-2664Fix available5.0 MediumDecember 31, 2004
ibm egathererThe (1) SetDebugging and (2) RunEgatherer methods in IBM Access Support eGatherer ActiveX control...CVE-2004-26637.5 HighDecember 31, 2004
soft3304 04webserverSoft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource...CVE-2004-26625.0 MediumDecember 31, 2004
soft3304 04webserverSoft3304 04WebServer before 1.41 does not properly check file names, which allows remote...CVE-2004-26615.0 MediumDecember 31, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open