2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-1884 | — | — | 5.8% | Mar 23, 2004 | Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers... |
| CVE-2004-1840 | — | — | 1.2% | Mar 22, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to in... |
| CVE-2004-1838 | — | — | 3.7% | Mar 22, 2004 | Directory traversal vulnerability in xweb 1.0 allows remote attackers to download arbitrary files via a .. (dot dot) in ... |
| CVE-2004-1839 | — | — | 1.2% | Mar 22, 2004 | MS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a direct request to (1) ... |
| CVE-2004-1834 | — | — | 3.5% | Mar 20, 2004 | mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard dis... |
| CVE-2004-1843 | — | — | 1.2% | Mar 20, 2004 | SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID ... |
| CVE-2004-1846 | — | — | 1.7% | Mar 20, 2004 | Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via... |
| CVE-2004-1847 | — | — | 2.9% | Mar 20, 2004 | News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ... |
| CVE-2004-1833 | — | — | 2.1% | Mar 20, 2004 | The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to... |
| CVE-2004-1853 | — | — | 2.2% | Mar 19, 2004 | Buffer overflow in Terminator 3: War of the Machines 1.0 allows remote attackers to cause a denial of service via a long... |
| CVE-2004-1830 | — | — | 2.8% | Mar 18, 2004 | error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid (... |
| CVE-2004-1829 | — | — | 1.9% | Mar 18, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in error.php in Gijza.net Error Manager 2.1 for PHP-Nuke 6.0 allow r... |
| CVE-2004-1825 | — | — | 2.0% | Mar 16, 2004 | Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote at... |
| CVE-2004-1826 | — | — | 1.2% | Mar 16, 2004 | SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to ex... |
| CVE-2004-0188 | — | — | 0.5% | Mar 15, 2004 | Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long passwo... |
| CVE-2004-0189 | — | — | 13.8% | Mar 15, 2004 | The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a U... |
| CVE-2004-0190 | — | — | 1.4% | Mar 15, 2004 | Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may b... |
| CVE-2004-0191 | — | — | 1.6% | Mar 15, 2004 | Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to in... |
| CVE-2004-0192 | — | — | 4.5% | Mar 15, 2004 | Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attac... |
| CVE-2004-0193 | — | — | 8.0% | Mar 15, 2004 | Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network ... |
| CVE-2004-1822 | — | — | 2.5% | Mar 15, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject ar... |
| CVE-2004-0094 | — | — | 3.1% | Mar 15, 2004 | Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbi... |
| CVE-2004-1827 | — | — | 2.1% | Mar 15, 2004 | Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject... |
| CVE-2004-0093 | — | — | 3.1% | Mar 15, 2004 | XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bou... |
| CVE-2004-0075 | — | — | 0.4% | Mar 15, 2004 | The Vicam USB driver in Linux before 2.4.25 does not use the copy_from_user function when copying data from userspace to... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now