By publication date
Exploited and new serious CVEs: April 2004
10 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
23Monitor | CVE-2004-1986Proof of concept | Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrativcoppermine · coppermine photo gallery | Medium5.0 | — | 10.6% | Apr 4, 2004 |
42Plan | CVE-2004-1060Proof of concept | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service icmp · icmp | Medium5.0 | — | 74.6% | Apr 12, 2004 |
28Monitor | CVE-2003-0905No exploit | Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remmicrosoft · windows media services | Medium5.0 | — | 25.8% | Apr 15, 2004 |
44Plan | CVE-2004-0121Proof of concept | Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as argumemicrosoft · office · CWE-88 | High7.5 | — | 47.6% | Apr 15, 2004 |
27Monitor | CVE-2004-0122No exploit | Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files.microsoft · msn messenger | Medium5.0 | — | 22.4% | Apr 15, 2004 |
25Monitor | CVE-2004-0173Proof of concept | Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackeapache · http server | Medium5.0 | — | 15.7% | Apr 15, 2004 |
52Plan | CVE-2004-0362Weaponized | Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various Reiss · blackice agent server | High7.5 | — | 73.3% | Apr 15, 2004 |
50Plan | CVE-2004-0363Weaponized | Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Securitsymantec · norton antispam | High7.5 | — | 66.5% | Apr 15, 2004 |
23Monitor | CVE-2004-1992Proof of concept | Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a long -l parameter, whsolarwinds · serv-u file server · CWE-119 | Medium5.0 | — | 11.1% | Apr 20, 2004 |
33Monitor | CVE-2004-1987No exploit | picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbicoppermine · coppermine photo gallery | High7.5 | — | 10.1% | Apr 30, 2004 |
- CVE-2004-198623Monitor
Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrativ
MediumCVSS 5.0Proof of conceptEPSS 10%coppermine · coppermine photo galleryApr 4, 2004
- CVE-2004-106042Plan
Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service
MediumCVSS 5.0Proof of conceptEPSS 74%icmp · icmpApr 12, 2004
- CVE-2003-090528Monitor
Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows rem
MediumCVSS 5.0No exploitEPSS 25%microsoft · windows media servicesApr 15, 2004
- CVE-2004-012144Plan
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as argume
HighCVSS 7.5Proof of conceptEPSS 47%microsoft · officeApr 15, 2004
- CVE-2004-012227Monitor
Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files.
MediumCVSS 5.0No exploitEPSS 22%microsoft · msn messengerApr 15, 2004
- CVE-2004-017325Monitor
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attacke
MediumCVSS 5.0Proof of conceptEPSS 15%apache · http serverApr 15, 2004
- CVE-2004-036252Plan
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various Re
HighCVSS 7.5WeaponizedEPSS 73%iss · blackice agent serverApr 15, 2004
- CVE-2004-036350Plan
Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Securit
HighCVSS 7.5WeaponizedEPSS 66%symantec · norton antispamApr 15, 2004
- CVE-2004-199223Monitor
Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a long -l parameter, wh
MediumCVSS 5.0Proof of conceptEPSS 11%solarwinds · serv-u file serverApr 20, 2004
- CVE-2004-198733Monitor
picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbi
HighCVSS 7.5No exploitEPSS 10%coppermine · coppermine photo galleryApr 30, 2004