Archive
15 December 2004
Vulnerabilities first published on this day (UTC), newest first.
61 results · Feed
-
Unscored —CVE-2004-0899 EPSS 73%
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, doe…
-
Unscored —CVE-2004-0901 EPSS 32%
Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data le…
-
Unscored —CVE-2004-0900 EPSS 26%
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the …
-
Unscored —CVE-2004-0571 EPSS 31%
Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers…
-
Unscored —
The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Window…
-
Unscored —
Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple i…
-
Unscored —CVE-2004-0568 EPSS 35%
HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly valid…
-
Unscored —CVE-2004-0894 Public exploit
LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly val…
-
Unscored —
Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with lar…
-
Unscored —CVE-2004-1016 Public exploit
The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users t…
-
Unscored —
SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that …
-
Unscored —CVE-2004-1217 Public exploit
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories b…
-
Unscored —
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local a…
-
Unscored —CVE-2004-1214 Public exploit
Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format spec…
-
Unscored —
Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windo…
-
Unscored —
Gadu-Gadu allows remote attackers to gain sensitive information and read files from the _cache directory of other users…
-
Unscored —
Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes en…
-
Unscored —CVE-2004-1227 Public exploit
Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary …
-
Unscored —
phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files …
-
Unscored —
phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers t…
-
Unscored —CVE-2004-1216 Public exploit
The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service (server f…
-
Unscored —
The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attacke…
-
Unscored —CVE-2004-1206 Public exploit
Directory traversal vulnerability in codebrowserpntm.php in pnTresMailer 6.0.3 allows remote attackers to read arbitrar…
-
Unscored —
Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exh…
-
Unscored —
Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more than 4GB of memory, could allow lo…
-
Unscored —CVE-2004-1221 Public exploit
Directory traversal vulnerability in weblibs.pl in WebLibs 1.0 allows remote attackers to read arbitrary files via .. s…
-
Unscored —
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of…
-
Unscored —
Firefox and Mozilla allow remote attackers to cause a denial of service (application crash from memory consumption), as…
-
Unscored —
parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensi…
-
Unscored —CVE-2004-1225 Public exploit
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption…
-
Unscored —
SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to s…
-
Unscored —
codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohig…
-
Unscored —
Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2004-1212 Public exploit
Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arb…
-
Unscored —CVE-2004-1196 Public exploit
Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to inject arbitrary web …
-
Unscored —
Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash from memory consump…
-
Unscored —
Prevx Home 1.0 allows local users with administrator privileges to bypass the intrusion prevention features by directly…
-
Unscored —
Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMO…
-
Unscored —CVE-2004-1220 Public exploit
Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a …