Latest Vulnerabilities with Public Exploits

Updated 3h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

371,550 CVEs tracked 55,332 with exploits 5,152 exploited in wild 1,656 CISA KEV 4,275 Nuclei templates 56,398 vendors 49,597 researchers

55,332 results Clear all

CVE-2004-0424 1 PoC Analysis EPSS 0.01

Linux kernel <2.6.3 - DoS/Buffer Overflow

Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.

Jul 07, 2004 STIX 2.1

CVE-2004-1957 2 PoCs Analysis EPSS 0.05

PostNuke 0.726 - Cross-Site Scripting via Downloads, Web_links, or openwindow.php Parameters

Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web script or HTML via the (1) lid and query parameters to the Downloads module, (2) query parameter to the Web_links module, or (3) hlpfile parameter to openwindow.php.

Apr 21, 2004 STIX 2.1

CVE-2004-1945 1 PoC Analysis EPSS 0.07

Kinesphere eXchange POP3 - Remote Code Execution via Long MAIL FROM Field

Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field.

Apr 20, 2004 STIX 2.1

CVE-2004-1992 1 PoC Analysis EPSS 0.11

Serv-U File Server < 5.0.0.6 - Denial of Service via Long -l Parameter

Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a long -l parameter, which triggers an out-of-bounds read.

CWE-119 Apr 20, 2004 STIX 2.1

CVE-2004-0233 1 PoC Analysis EPSS 0.01

SGI Propack - Path Traversal

Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.

Aug 18, 2004 STIX 2.1

CVE-2004-1938 1 PoC Analysis EPSS 0.01

Phorum 3.4.7 - SQL Injection via Doubly Hex-Encoded Characters

SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", as demonstrated using the phorum_uriauth parameter to list.php.

Apr 19, 2004 STIX 2.1

CVE-2004-1943 1 PoC Analysis EPSS 0.03

phpBB modified by Przemo 1.8 - Remote File Inclusion via album_portal.php phpbb_root_path Parameter

PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter.

Apr 19, 2004 STIX 2.1

CVE-2004-1947 2 PoCs Analysis EPSS 0.07

BitDefender Scan Online - Info Disclosure

The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab.

Apr 19, 2004 STIX 2.1

CVE-2004-2505 1 PoC Analysis EPSS 0.03

Macromedia ColdFusion MX <6.1 - DoS

Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service (memory consumption and crash) by sending repeated GET or POST requests that trigger error messages that use long strings of data.

Dec 31, 2004 STIX 2.1

CVE-2004-0333 1 PoC Analysis EPSS 0.24

UUDeview <8.1 - Remote Code Execution

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.

Nov 23, 2004 STIX 2.1

CVE-2004-0389 7.5 HIGH 1 PoC Analysis EPSS 0.52

RealNetworks Helix Universal Server <9.0.3 - DoS

RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.

CWE-476 Jun 01, 2004 STIX 2.1

CVE-2004-1934 1 PoC Analysis EPSS 0.08

Gemitel 3.50 - Remote Code Execution

PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP code via the base parameter.

Apr 15, 2004 STIX 2.1

CVE-2004-1935 1 PoC Analysis EPSS 0.02

SCT Campus Pipeline - Stored Cross-Site Scripting via Email Attachment Event Handlers

Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an e-mail attachment.

Apr 15, 2004 STIX 2.1

CVE-2004-0120 1 PoC Analysis EPSS 0.51

Microsoft Windows SSL Library - Denial of Service via Malformed SSL Messages

The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.

Jun 01, 2004 STIX 2.1

CVE-2004-0179 1 PoC Analysis EPSS 0.11

neon < 0.24.5 - Remote Code Execution via Format String Vulnerability

Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.

CWE-134 Jun 01, 2004 STIX 2.1

CVE-2004-1939 1 PoC Analysis EPSS 0.02

Zaep AntiSpam 2.0 - Cross-Site Scripting via Double Encoded Slashes in Key Parameter

Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes (%252F) in the key parameter.

Apr 14, 2004 STIX 2.1

CVE-2004-1944 1 PoC Analysis EPSS 0.02

Qualcomm Eudora 6.0.3-6.1 - Denial of Service via Deeply Nested Multipart MIME Message

Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nested multipart MIME message.

Apr 14, 2004 STIX 2.1

CVE-2004-1929 1 PoC Analysis EPSS 0.07

PHP-Nuke 6.x-7.2 - SQL Injection via User Parameter

SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code into the user parameter.

Apr 13, 2004 STIX 2.1

CVE-2004-1930 1 PoC Analysis EPSS 0.02

PHP-Nuke 6.x-7.2 - Cross-Site Scripting via Base64-Encoded User Parameter or Cookie

Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when themes are used, allows remote attackers to inject arbitrary web script or HTML via a base64-encoded user parameter or cookie.

Apr 12, 2004 STIX 2.1

CVE-2004-1892 1 PoC Analysis EPSS 0.10

eMule 0.42d - Stack-based Buffer Overflow in DecodeBase16 Function

Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, allows remote attackers to execute arbitrary code via a long string.

Dec 31, 2004 STIX 2.1

Latest Vulnerabilities with Public Exploits

Investigate

Ecosystems

Reference Indexes

Recent Blog Posts

CVEForge Labs

KEV Gaps