Vulnerability database · updated every 15 minutes
New vulnerabilities in the software websites run.
CVEs and security advisories for WordPress, its plugins and themes, npm, PyPI and the servers behind websites, merged from NVD, the CVE Program, GitHub, OSV.dev and WPVulnerability, with CISA's list of the ones attackers exploit.
- Tracked
- 40,159
- Published in 7 days
- 1,158
- Critical in 30 days
- 353
- Actively exploited
- 423
Latest vulnerabilities
40,159 vulnerabilities- Low 2.6
CVE-2004-0837 · MySQL
MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.
Published 3 Nov 2004 · Fixed in 3.23.49, 4.0.21 · NVD - High 10.0
CVE-2004-0836 · MySQL
Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).
Published 3 Nov 2004 · Fixed in 3.23.49, 4.0.21 · NVD - High 7.5
CVE-2004-0835 · MySQL
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.
Published 3 Nov 2004 · Fixed in 3.23.59, 4.0.19 · NVD - High 7.5
CVE-2004-0815 · Samba
The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames.
Published 3 Nov 2004 · NVD - High 10.0
CVE-2004-0574 · Microsoft Exchange Server
The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.
Published 3 Nov 2004 · NVD - Medium 5.0
CVE-2003-0718 · Microsoft IIS
The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of attributes.
Published 3 Nov 2004 · NVD - Medium 5.0
CVE-2004-0786 · Apache HTTP Server
The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.
Published 20 Oct 2004 · Fixed in 2.0.51 · NVD - Medium 5.0
CVE-2004-0751 · Apache HTTP Server
The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).
Published 20 Oct 2004 · Fixed in 2.0.51 · NVD - Medium 5.0
CVE-2004-0748 · Apache HTTP Server
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.
Published 20 Oct 2004 · Fixed in 2.0.51 · NVD - High 7.8
CVE-2004-0747 · Apache HTTP Server
Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables.
Published 20 Oct 2004 · Fixed in 2.0.51 · NVD - Low 2.1
CVE-2004-0559 · Webmin
The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory.
Published 20 Oct 2004 · NVD - Medium 5.5
CVE-2004-1603 · cPanel & WHM
cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.
Published 18 Oct 2004 · NVD - Medium 5.0
CVE-2004-1602 · ProFTPD
ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response.
Published 15 Oct 2004 · NVD - Medium 5.0
CVE-2004-1604 · cPanel & WHM
cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the _private directory, which is created when Front Page extensions are enabled.
Published 30 Sept 2004 · NVD - Medium 4.6
CVE-2004-0457 · MySQL
The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Published 28 Sept 2004 · NVD - High 7.5
CVE-2004-0827 · ImageMagick
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
Published 16 Sept 2004 · NVD - Medium 5.0
CVE-2004-0809 · Apache HTTP Server
The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.
Published 16 Sept 2004 · Fixed in 2.0.51 · NVD - Medium 5.0
CVE-2004-0807 · Samba
Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.
Published 13 Sept 2004 · NVD - Medium 6.4
CVE-2004-1653 · OpenSSH
The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS.
Published 31 Aug 2004 · NVD - Medium 5.0
CVE-2004-1643 · WS_FTP Server
WS_FTP 5.0.2 allows remote authenticated users to cause a denial of service (CPU consumption) via a CD command that contains an invalid path with a "../" sequence.
Published 29 Aug 2004 · NVD - High 7.2
CVE-2004-0490 · cPanel & WHM
cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path option, which causes php to use the SCRIPT_FILENAME variable to find and execute a script instead of the PATH_TRANSLATED variable, which allows local users to execute arbitrary PHP code as other users via a URL that references the attacker's script after the user's script, which…
Published 18 Aug 2004 · NVD - Medium 4.3
CVE-2004-0175 · OpenSSH
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
Published 18 Aug 2004 · NVD - Medium 4.3
CVE-2004-1711 · Moodle
Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter.
Published 6 Aug 2004 · NVD - Medium 5.0
CVE-2004-0583 · Webmin
The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords.
Published 6 Aug 2004 · NVD - Medium 5.0
CVE-2004-0582 · Webmin
Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration information for a module.
Published 6 Aug 2004 · NVD - Medium 5.0
CVE-2004-0547 · PostgreSQL
Buffer overflow in the ODBC driver for PostgreSQL before 7.2.1 allows remote attackers to cause a denial of service (crash).
Published 6 Aug 2004 · NVD - High 10.0
CVE-2004-0542 · PHP
PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via (1) the "%", "|", or ">" characters to the escapeshellcmd function, or (2) the "%" character to the escapeshellarg function.
Published 6 Aug 2004 · Fixed in 4.3.7 · NVD - Medium 6.4
CVE-2004-0493 · Apache HTTP Server
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.
Published 6 Aug 2004 · NVD - High 10.0
CVE-2004-0492 · Apache HTTP Server
Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
Published 6 Aug 2004 · NVD - Medium 6.8
CVE-2004-0725 · Moodle
Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or HTML via the file parameter.
Published 27 Jul 2004 · NVD - Medium 5.0
CVE-2004-0686 · Samba
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
Published 27 Jul 2004 · Fixed in 2.2.10, 3.0.5 · NVD - High 10.0
CVE-2004-0600 · Samba
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
Published 27 Jul 2004 · NVD - Medium 6.8
CVE-2004-0595 · PHP
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.
Published 27 Jul 2004 · NVD - Medium 5.1
CVE-2004-0594 · PHP
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.
Published 27 Jul 2004 · Fixed in 4.3.7 · NVD - High 7.5
CVE-2004-0488 · Apache HTTP Server
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
Published 7 Jul 2004 · Fixed in 2.0.50 · NVD - Low 2.1
CVE-2004-0388 · MySQL
The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.
Published 1 Jun 2004 · NVD - Low 2.1
CVE-2004-0381 · MySQL
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.
Published 4 May 2004 · NVD - High 7.5
CVE-2004-0174 · Apache HTTP Server
Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a "short-lived connection on a rarely-accessed listening socket."
Published 4 May 2004 · NVD - Medium 4.3
CVE-2004-1978 · Moodle
Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter.
Published 30 Apr 2004 · NVD - Medium 5.0
CVE-2004-0173 · Apache HTTP Server
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing "..%5C" (dot dot encoded backslash) sequences.
Published 15 Apr 2004 · NVD - High 7.5
CVE-2004-0150 · Python
Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS.
Published 15 Apr 2004 · Fixed in 2.2.2 · NVD - High 9.3
CVE-2004-1875 · cPanel & WHM
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to testfile.html, (2) file parameter to erredit.html, (3) dns parameter to dnslook.html, (4) account parameter to ignorelist.html, (5) account parameter to showlog.html, (6) db parameter to repairdb.html, (7) login parameter to…
Published 30 Mar 2004 · NVD - Medium 5.0
CVE-2004-0113 · Apache HTTP Server
Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.
Published 29 Mar 2004 · NVD - High 7.5
CVE-2003-0993 · Apache HTTP Server
mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.
Published 29 Mar 2004 · NVD - Medium 4.3
CVE-2004-1849 · cPanel & WHM
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to dodelautores.html or (2) handle parameter to addhandle.html.
Published 24 Mar 2004 · NVD - High 7.5
CVE-2004-1884 · WS_FTP Server
Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.
Published 23 Mar 2004 · NVD - Low 2.1
CVE-2004-1834 · Apache HTTP Server
mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard disk, which could allow local users to gain sensitive information.
Published 20 Mar 2004 · NVD - High 7.2
CVE-2004-0186 · Samba
smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.
Published 15 Mar 2004 · NVD - High 7.5
CVE-2004-0110 · libxml2
Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.
Published 15 Mar 2004 · NVD - High 10.0
CVE-2004-1770 · cPanel & WHM
The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter.
Published 11 Mar 2004 · NVD
Where it comes from
The list holds every advisory UpHeron reads for the software it watches: WordPress and every plugin and theme its plugin reports, the packages in monitored repositories and manifests, and the servers and frameworks found on monitored websites. One vulnerability from several sources is one entry, under its CVE.
- NVD, the US National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
- New and changed records of the CVE Program, read every 15 minutes, so a rating or fix added after a CVE is published reaches the list, and its alerts, within the hour. CVE content © 1999–2026 The MITRE Corporation, used under the CVE terms of use; CVE® is a registered trademark of The MITRE Corporation.
- OSV.dev, with the GitHub Advisory Database (CC BY 4.0).
- WPVulnerability (CC0) for WordPress plugins and themes, and WordPress's own security advisories.
- Node.js's own security release posts, read every 15 minutes, which name its vulnerabilities the day they are fixed, days before their CVE records.
- The security advisories projects publish on GitHub, and the CVEs libraries such as Brotli name in their release notes, which also count for the runtimes that bundle them.
- CISA's Known Exploited Vulnerabilities catalog.
Each day's new ones, grouped, and every critical one as soon as we find it: on the blog.
Run WordPress? The UpHeron plugin alerts you the day one of these affects your own site.