Skip to content
OpenAdvisories

Archive

10 December 2004

Vulnerabilities first published on this day (UTC), newest first.

← November 2004 2004 / December /10 January 2005 →
  1. 146
  2. 2 
  3. 3 
  4. 4 
  5. 58
  6. 6 
  7. 7 
  8. 813
  9. 9 
  10. 1021
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 1561
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2272
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 3124
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2004-0993 EPSS 10%

    Buffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service (application crash) or possi…

    hpsockd Debian
  • Unscored —
    CVE-2004-0915

    Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not proper…

  • Unscored —
    CVE-2004-1162

    The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote …

  • Unscored —
    CVE-2004-1158

    Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injec…

  • Unscored —
    CVE-2004-1160

    Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting con…

  • Unscored —
    CVE-2004-1167

    mirrorselect before 0.89 creates temporary files in a world-writable location with predictable file names, which allows…

  • Unscored —
    CVE-2004-1156

    Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting conte…

  • Unscored —
    CVE-2004-1170 Public exploit EPSS 16%

    a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.

    a2ps Debian
  • Unscored —
    CVE-2004-1122

    Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remot…

  • Unscored —
    CVE-2004-1166 Public exploit EPSS 39%

    CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2004-1161 Public exploit

    rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated user…

  • Unscored —
    CVE-2004-1169

    MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service (application crash) via an HT…

  • Unscored —
    CVE-2004-1026

    Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several wind…

    imlib2 Debian
  • Unscored —
    CVE-2004-1164

    The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2004-1165 Public exploit

    Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded…

  • Unscored —
    CVE-2004-1157

    Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting co…

  • Unscored —
    CVE-2004-1171

    KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by …

  • Unscored —
    CVE-2004-1163

    Cisco CNS Network Registrar Central Configuration Management (CCM) server 6.0 through 6.1.1.3 allows remote attackers t…

  • Unscored —
    CVE-2004-1168

    Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2004-1155 EPSS 13%

    Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one win…

  • Unscored —
    CVE-2004-1067

    Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, w…