Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: November 2004

36 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2003-0718
    46Plan

    The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (m

    MediumCVSS 5.0Proof of conceptEPSS 87%

    microsoft · internet information serverNov 3, 2004

  • CVE-2004-0206
    52Plan

    Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003

    HighCVSS 7.5WeaponizedEPSS 74%

    microsoft · windows 2000Nov 3, 2004

  • CVE-2004-0209
    57Plan

    Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remot

    CriticalCVSS 10.0Proof of conceptEPSS 57%

    microsoft · windows 2000Nov 3, 2004

  • CVE-2004-0214
    54Plan

    Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote mal

    CriticalCVSS 10.0Proof of conceptEPSS 46%

    microsoft · internet explorerNov 3, 2004

  • CVE-2004-0216
    55Plan

    Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code

    CriticalCVSS 10.0No exploitEPSS 48%

    microsoft · ieNov 3, 2004

  • CVE-2004-0552
    37Monitor

    Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1

    HighCVSS 7.5Proof of conceptEPSS 23%

    sophos · small business suiteNov 3, 2004

  • CVE-2004-0569
    36Monitor

    The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service (system cras

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · windows ntNov 3, 2004

  • CVE-2004-0572
    55Plan

    Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL w

    CriticalCVSS 10.0No exploitEPSS 49%

    microsoft · grpconvNov 3, 2004

  • CVE-2004-0574
    59Plan

    The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2

    CriticalCVSS 10.0Proof of conceptEPSS 64%

    microsoft · exchange serverNov 3, 2004

  • CVE-2004-0575
    58Plan

    Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Ed

    CriticalCVSS 10.0Proof of conceptEPSS 60%

    microsoft · windows 2003 serverNov 3, 2004

  • CVE-2004-0832
    23Monitor

    The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attac

    MediumCVSS 5.0No exploitEPSS 10%

    squid · squidNov 3, 2004

  • CVE-2004-0835
    37Monitor

    MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table

    HighCVSS 7.5Proof of conceptEPSS 22%

    mysql · mysqlNov 3, 2004

  • CVE-2004-0840
    49Plan

    The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit E

    CriticalCVSS 10.0No exploitEPSS 30%

    microsoft · exchange serverNov 3, 2004

  • CVE-2004-0843
    30Monitor

    Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and t

    MediumCVSS 5.0No exploitEPSS 33%

    microsoft · ieNov 3, 2004

  • CVE-2004-0844
    30Monitor

    Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter displayed address bars and spoof web pages

    MediumCVSS 5.0No exploitEPSS 32%

    microsoft · ieNov 3, 2004

  • CVE-2004-0845
    34Monitor

    Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content

    MediumCVSS 6.4No exploitEPSS 30%

    microsoft · ieNov 3, 2004

  • CVE-2004-0846
    39Monitor

    Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a m

    HighCVSS 7.5No exploitEPSS 28%

    microsoft · excelNov 3, 2004

  • CVE-2004-0847
    62This week

    The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricte

    CriticalCVSS 9.8Proof of conceptEPSS 75%

    microsoft · asp.netNov 3, 2004

  • CVE-2004-0885
    35Monitor

    The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remot

    HighCVSS 7.5No exploitEPSS 15%

    apache · http serverNov 3, 2004

  • CVE-2004-1315
    52Plan

    viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, whic

    HighCVSS 7.5WeaponizedEPSS 72%

    phpbb group · phpbbNov 12, 2004

  • CVE-2004-1331
    16Monitor

    The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialo

    LowCVSS 2.6No exploitEPSS 19%

    microsoft · ieNov 16, 2004

  • CVE-2004-0112
    23Monitor

    The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of

    MediumCVSS 5.0No exploitEPSS 10%

    openssl · opensslNov 23, 2004

  • CVE-2004-0203
    23Monitor

    Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbi

    MediumCVSS 4.3No exploitEPSS 20%

    microsoft · exchange serverNov 23, 2004

  • CVE-2004-0270
    23Monitor

    libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid

    MediumCVSS 5.0Proof of conceptEPSS 10%

    clam anti-virus · clamavNov 23, 2004

  • CVE-2004-0277
    44Plan

    Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary co

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    bolintech · dream ftp serverNov 23, 2004

  • CVE-2004-0284
    25Monitor

    Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "D

    MediumCVSS 5.0No exploitEPSS 16%

    microsoft · ieNov 23, 2004

  • CVE-2004-0297
    60This week

    Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote

    CriticalCVSS 10.0WeaponizedEPSS 68%

    ipswitch · imailNov 23, 2004

  • CVE-2004-0313
    59Plan

    Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP re

    CriticalCVSS 10.0WeaponizedEPSS 63%

    psoproxy · psoproxy serverNov 23, 2004

  • CVE-2004-0326
    59Plan

    Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request.

    CriticalCVSS 10.0WeaponizedEPSS 62%

    proxy-pro · professional gatekeeperNov 23, 2004

  • CVE-2004-0330
    66This week

    Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to th

    CriticalCVSS 10.0WeaponizedEPSS 85%

    solarwinds · serv-u file serverNov 23, 2004

  • CVE-2004-0331
    40Plan

    Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (crash) via a HTTP POST

    MediumCVSS 5.0WeaponizedEPSS 15%

    dell · openmanageNov 23, 2004

  • CVE-2004-0333
    47Plan

    Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers

    CriticalCVSS 10.0Proof of conceptEPSS 24%

    uudeview · uudeviewNov 23, 2004

  • CVE-2004-0354
    45Plan

    Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    gnu · anubisNov 23, 2004

  • CVE-2004-0597
    65This week

    Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via ma

    CriticalCVSS 10.0Proof of conceptEPSS 81%

    greg roelofs · libpngNov 23, 2004

  • CVE-2004-0636
    60This week

    Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote

    CriticalCVSS 10.0WeaponizedEPSS 66%

    aol · instant messengerNov 23, 2004

  • CVE-2004-0771
    46Plan

    Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working director

    CriticalCVSS 10.0Proof of conceptEPSS 18%

    tsugio okamoto · lhaNov 23, 2004