Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: July 2004

22 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2004-0397
    53Plan

    Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitra

    HighCVSS 7.5WeaponizedEPSS 75%

    subversion · subversionJul 7, 2004

  • CVE-2004-0399
    36Monitor

    Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cau

    HighCVSS 7.5Proof of conceptEPSS 20%

    university of cambridge · eximJul 7, 2004

  • CVE-2004-0420
    54Plan

    The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote att

    CriticalCVSS 10.0No exploitEPSS 46%

    microsoft · ieJul 7, 2004

  • CVE-2004-0430
    40Plan

    Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a Login

    MediumCVSS 5.1WeaponizedEPSS 41%

    apple · mac os xJul 7, 2004

  • CVE-2004-0444
    44Plan

    Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 20

    CriticalCVSS 10.0No exploitEPSS 12%

    symantec · client firewallJul 7, 2004

  • CVE-2004-0445
    13Monitor

    The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, N

    LowCVSS 2.6Proof of conceptEPSS 11%

    symantec · client firewallJul 7, 2004

  • CVE-2004-0474
    25Monitor

    Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic

    MediumCVSS 5.1Proof of conceptEPSS 16%

    microsoft · windows xpJul 7, 2004

  • CVE-2004-0475
    23Monitor

    The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double ba

    MediumCVSS 5.1No exploitEPSS 10%

    microsoft · ieJul 7, 2004

  • CVE-2004-0479
    28Monitor

    Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables

    MediumCVSS 5.0Proof of conceptEPSS 25%

    microsoft · ieJul 7, 2004

  • CVE-2004-0484
    17Monitor

    mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a for

    LowCVSS 2.6Proof of conceptEPSS 21%

    microsoft · internet explorerJul 7, 2004

  • CVE-2004-0488
    41Plan

    Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust t

    HighCVSS 7.5No exploitEPSS 37%

    apache · http serverJul 7, 2004

  • CVE-2003-1048
    39Monitor

    Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (

    HighCVSS 7.8No exploitEPSS 26%

    microsoft · internet explorerJul 27, 2004

  • CVE-2004-0566
    42Plan

    Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits val

    HighCVSS 7.5No exploitEPSS 38%

    microsoft · internet explorerJul 27, 2004

  • CVE-2004-0594
    36Monitor

    The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is ena

    MediumCVSS 5.1Proof of conceptEPSS 54%

    hp · hp-uxJul 27, 2004

  • CVE-2004-0595
    41Plan

    The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricti

    MediumCVSS 6.8Proof of conceptEPSS 45%

    php · phpJul 27, 2004

  • CVE-2004-0600
    49Plan

    Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an

    CriticalCVSS 10.0Proof of conceptEPSS 29%

    samba · sambaJul 27, 2004

  • CVE-2004-0695
    41Plan

    Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long

    HighCVSS 7.5WeaponizedEPSS 38%

    4d · webstarJul 27, 2004

  • CVE-2004-0723
    29Monitor

    Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between

    MediumCVSS 6.4No exploitEPSS 13%

    microsoft · java virtual machineJul 27, 2004

  • CVE-2004-0726
    33Monitor

    The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone vi

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · windows 2000Jul 27, 2004

  • CVE-2004-0727
    42Plan

    Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers

    HighCVSS 7.5Proof of conceptEPSS 39%

    microsoft · internet explorerJul 27, 2004

  • CVE-2004-0728
    27Monitor

    The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of se

    MediumCVSS 5.0Proof of conceptEPSS 24%

    microsoft · systems management serverJul 27, 2004

  • CVE-2004-0735
    49Plan

    Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earl

    HighCVSS 7.5WeaponizedEPSS 62%

    electronic arts · medal of honor allied assaultJul 27, 2004