Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: April 2005

12 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2004-0790
    44Plan

    Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error

    MediumCVSS 5.0Proof of conceptEPSS 80%

    microsoft · windows 2000Apr 12, 2005

  • CVE-2004-0791
    26Monitor

    Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connectio

    MediumCVSS 5.0Proof of conceptEPSS 20%

    sun · solarisApr 12, 2005

  • CVE-2005-0555
    48Plan

    Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via

    HighCVSS 7.5Proof of conceptEPSS 58%

    microsoft · internet explorerApr 12, 2005

  • CVE-2005-0562
    37Monitor

    GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image wi

    HighCVSS 7.5No exploitEPSS 23%

    microsoft · msn messengerApr 12, 2005

  • CVE-2005-1099
    60This week

    Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a networ

    CriticalCVSS 10.0WeaponizedEPSS 67%

    salim gasmi · gldApr 12, 2005

  • CVE-2005-0129
    33Monitor

    The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" var

    HighCVSS 7.5Proof of conceptEPSS 10%

    berlios · konversationApr 14, 2005

  • CVE-2005-0718
    24Monitor

    Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a

    MediumCVSS 5.0No exploitEPSS 12%

    squid · squidApr 14, 2005

  • CVE-2005-0684
    61This week

    Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP

    CriticalCVSS 10.0WeaponizedEPSS 68%

    mysql · maxdbApr 25, 2005

  • CVE-2005-1275
    24Monitor

    Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial

    MediumCVSS 5.0Proof of conceptEPSS 13%

    imagemagick · imagemagickApr 25, 2005

  • CVE-2004-1488
    24Monitor

    wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote mali

    MediumCVSS 5.0Proof of conceptEPSS 11%

    gnu · wgetApr 27, 2005

  • CVE-2005-0416
    42Plan

    The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote

    HighCVSS 7.5Proof of conceptEPSS 40%

    microsoft · windows 2000Apr 27, 2005

  • CVE-2005-0420
    31Monitor

    Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a lin

    MediumCVSS 5.8Proof of conceptEPSS 25%

    microsoft · exchange serverApr 27, 2005