2004 CVE Vulnerabilities

2,707 CVEs published in 2004.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2004-1856——devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to up...
CVE-2004-1854——Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code ...
CVE-2004-1851——Dameware Mini Remote Control 4.1.0.0 uses insufficiently random data to create the encryption key, which makes it easier...
CVE-2004-1855——Dark Age of Camelot before 1.68 live patch does not sign the RSA public key, which could allow remote malicious servers ...
CVE-2004-1852——DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, whic...
CVE-2004-1850——The Rage 1.01 and earlier allows remote attackers to cause a denial of service (infinite loop) via a TCP packet with the...
CVE-2004-1886——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-1848. Reason: This candidate is a duplicate of...
CVE-2004-1884——Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers...
CVE-2004-1840——Multiple cross-site scripting (XSS) vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to in...
CVE-2004-1838——Directory traversal vulnerability in xweb 1.0 allows remote attackers to download arbitrary files via a .. (dot dot) in ...
CVE-2004-1839——MS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a direct request to (1) ...
CVE-2004-1846——Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via...
CVE-2004-1833——The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to...
CVE-2004-1843——SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID ...
CVE-2004-1847——News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ...
CVE-2004-1834——mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard dis...
CVE-2004-1853——Buffer overflow in Terminator 3: War of the Machines 1.0 allows remote attackers to cause a denial of service via a long...
CVE-2004-1829——Multiple cross-site scripting (XSS) vulnerabilities in error.php in Gijza.net Error Manager 2.1 for PHP-Nuke 6.0 allow r...
CVE-2004-1830——error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid (...
CVE-2004-1826——SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to ex...
CVE-2004-1825——Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote at...
CVE-2004-1827——Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject...
CVE-2004-0193——Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network ...
CVE-2004-0188——Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long passwo...
CVE-2004-0185——Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to ca...

Check if your code is affected by 2004 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now