Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2004

11 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2004-0637
    31Monitor

    Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload pack

    MediumCVSS 6.5Proof of conceptEPSS 17%

    oracle · oracle8iSep 2, 2004

  • CVE-2004-1675
    24Monitor

    Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command wit

    MediumCVSS 5.0Proof of conceptEPSS 12%

    solarwinds · serv-u file serverSep 11, 2004

  • CVE-2004-1686
    23Monitor

    Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML

    MediumCVSS 5.0No exploitEPSS 10%

    microsoft · ieSep 15, 2004

  • CVE-2004-0809
    25Monitor

    The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain seq

    MediumCVSS 5.0No exploitEPSS 17%

    apache · http serverSep 16, 2004

  • CVE-2004-0866
    33Monitor

    Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which c

    HighCVSS 7.5No exploitEPSS 10%

    kde · konquerorSep 16, 2004

  • CVE-2004-0869
    24Monitor

    Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/S

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · ieSep 16, 2004

  • CVE-2004-1695
    43Plan

    EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    emulive · server4Sep 20, 2004

  • CVE-2004-0200
    52Plan

    Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote

    CriticalCVSS 9.3Proof of conceptEPSS 49%

    microsoft · .net frameworkSep 28, 2004

  • CVE-2004-0558
    28Monitor

    The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang

    MediumCVSS 5.0Proof of conceptEPSS 26%

    easy software products · cupsSep 28, 2004

  • CVE-2004-0573
    43Plan

    Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 al

    HighCVSS 7.5No exploitEPSS 42%

    microsoft · frontpageSep 28, 2004

  • CVE-2004-0691
    34Monitor

    Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of

    HighCVSS 7.5Proof of conceptEPSS 14%

    trolltech · qtSep 28, 2004