Skip to content
OpenAdvisories

Archive

December 2004

Vulnerabilities first published in this month (UTC), newest first.

← November 2004 2004 / December January 2005 →
  1. 146
  2. 2 
  3. 3 
  4. 4 
  5. 58
  6. 6 
  7. 7 
  8. 813
  9. 9 
  10. 1021
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 1561
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2272
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 3124
All Critical High Medium Low Exploited only Public exploit

245 results · Feed

  • Unscored —
    CVE-2004-1158

    Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injec…

  • Unscored —
    CVE-2004-1160

    Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting con…

  • Unscored —
    CVE-2004-1167

    mirrorselect before 0.89 creates temporary files in a world-writable location with predictable file names, which allows…

  • Unscored —
    CVE-2004-1156

    Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting conte…

  • Unscored —
    CVE-2004-1170 Public exploit EPSS 16%

    a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.

    a2ps Debian
  • Unscored —
    CVE-2004-1122

    Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remot…

  • Unscored —
    CVE-2004-1166 Public exploit EPSS 39%

    CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2004-1161 Public exploit

    rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated user…

  • Unscored —
    CVE-2004-1169

    MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service (application crash) via an HT…

  • Unscored —
    CVE-2004-1026

    Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several wind…

    imlib2 Debian
  • Unscored —
    CVE-2004-1164

    The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2004-1165 Public exploit

    Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded…

  • Unscored —
    CVE-2004-1157

    Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting co…

  • Unscored —
    CVE-2004-1171

    KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by …

  • Unscored —
    CVE-2004-1163

    Cisco CNS Network Registrar Central Configuration Management (CCM) server 6.0 through 6.1.1.3 allows remote attackers t…

  • Unscored —
    CVE-2004-1168

    Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2004-1155 EPSS 13%

    Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one win…

  • Unscored —
    CVE-2004-1067

    Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, w…

  • Unscored —
    CVE-2004-0770

    romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on tem…

    dgen Debian
  • Unscored —
    CVE-2004-0139

    Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions,…

  • Unscored —
    CVE-2004-1020 Public exploit

    The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers t…

  • Unscored —
    CVE-2004-1151

    Multiple buffer overflows in the (1) sys32_ni_syscall and (2) sys32_vm86_warning functions in sys_ia32.c for Linux 2.6.…

  • Unscored —
    CVE-2004-1063

    PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users…

  • Unscored —
    CVE-2004-1136

    Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP servers to cause a denial o…

  • Unscored —
    CVE-2004-1133

    Multiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow remote attackers to inje…

  • Unscored —
    CVE-2004-1135 Public exploit EPSS 50%

    Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service…

  • Unscored —
    CVE-2004-1076

    Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to ex…

    atari800 Debian
  • Unscored —
    CVE-2004-1134 Public exploit EPSS 72%

    Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possi…

  • Unscored —
    CVE-2004-1018 Public exploit EPSS 16%

    Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial …

  • Unscored —
    CVE-2004-1014

    statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denia…

    nfs-utils Debian
  • Unscored —
    CVE-2004-1064

    The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the rea…

  • Unscored —
    CVE-2004-0987

    Buffer overflow in the process_menu function in yardradius 1.0.20 allows remote attackers to execute arbitrary code.

  • Unscored —
    CVE-2004-0956

    MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query …

  • Unscored —
    CVE-2004-1066

    The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not …

  • Unscored —
    CVE-2004-1130

    Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary w…

  • Unscored —
    CVE-2004-1128

    Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment …

  • Unscored —
    CVE-2004-1127 Public exploit EPSS 15%

    Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code…

  • Unscored —
    CVE-2004-1129

    SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in…

  • Unscored —
    CVE-2004-1123

    Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (ser…

  • Unscored —
    CVE-2004-0953 Public exploit EPSS 11%

    Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a den…