By publication date
Exploited and new serious CVEs: May 2004
7 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2004-2043Proof of concept | Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codeborland software · interbase | Medium5.0 | — | 11.8% | May 1, 2004 |
33Monitor | CVE-2004-0174No exploit | Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to apache · http server · CWE-667 | High7.5 | — | 11.5% | May 4, 2004 |
40Plan | CVE-2004-0176Proof of concept | Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary coethereal group · ethereal | Medium5.0 | — | 67.0% | May 4, 2004 |
38Monitor | CVE-2004-0184Proof of concept | Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an Itcpdump · tcpdump · CWE-125 | Medium5.0 | — | 60.3% | May 4, 2004 |
43Plan | CVE-2004-0368No exploit | Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary codeopen group · cde common desktop environment · CWE-119 | Critical10.0 | — | 10.5% | May 4, 2004 |
59Plan | CVE-2004-0380Proof of concept | The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrmicrosoft · outlook express | Critical10.0 | — | 63.2% | May 4, 2004 |
48Plan | CVE-2004-0386Proof of concept | Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a lmplayer · mplayer | Critical10.0 | — | 26.9% | May 4, 2004 |
- CVE-2004-204324Monitor
Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase code
MediumCVSS 5.0Proof of conceptEPSS 11%borland software · interbaseMay 1, 2004
- CVE-2004-017433Monitor
Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to
HighCVSS 7.5No exploitEPSS 11%apache · http serverMay 4, 2004
- CVE-2004-017640Plan
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary co
MediumCVSS 5.0Proof of conceptEPSS 67%ethereal group · etherealMay 4, 2004
- CVE-2004-018438Monitor
Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an I
MediumCVSS 5.0Proof of conceptEPSS 60%tcpdump · tcpdumpMay 4, 2004
- CVE-2004-036843Plan
Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code
CriticalCVSS 10.0No exploitEPSS 10%open group · cde common desktop environmentMay 4, 2004
- CVE-2004-038059Plan
The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restr
CriticalCVSS 10.0Proof of conceptEPSS 63%microsoft · outlook expressMay 4, 2004
- CVE-2004-038648Plan
Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a l
CriticalCVSS 10.0Proof of conceptEPSS 26%mplayer · mplayerMay 4, 2004