2004 CVE Vulnerabilities

2,707 CVEs published in 2004.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2004-1196——Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to inject arbitrary web s...
CVE-2004-1188——The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does n...
CVE-2004-1208——Buffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service (application crash) and po...
CVE-2004-1209——Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOU...
CVE-2004-1207——The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Seriou...
CVE-2004-1212——Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbi...
CVE-2004-1215——Kreed 1.05 and earlier allows remote attackers to cause a denial of service (server disconnect) via a long UDP packet, w...
CVE-2004-1211——Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of ...
CVE-2004-1206——Directory traversal vulnerability in codebrowserpntm.php in pnTresMailer 6.0.3 allows remote attackers to read arbitrary...
CVE-2004-1219——paFileDB 3.1, when using sessions authentication and while the administrator logs on, allows remote attackers to read th...
CVE-2004-1223——The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as...
CVE-2004-1224——Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets...
CVE-2004-1222——weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFile...
CVE-2004-1218——Remote Execute 2.30 allows remote attackers to cause a denial of service (application crash) by making 7 simultaneous co...
CVE-2004-1227——Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary f...
CVE-2004-1228——The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attacker...
CVE-2004-1226——SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to sc...
CVE-2004-1221——Directory traversal vulnerability in weblibs.pl in WebLibs 1.0 allows remote attackers to read arbitrary files via .. se...
CVE-2004-1220——Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a d...
CVE-2004-1230——Gadu-Gadu allows remote attackers to gain sensitive information and read files from the _cache directory of other users ...
CVE-2004-1216——The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service (server fr...
CVE-2004-1214——Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format speci...
CVE-2004-1213——Cross-site scripting (XSS) vulnerability in index.php in Advanced Guestbook 2.3.1, 2.2, and possibly other versions allo...
CVE-2004-1210——Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attac...
CVE-2004-1229——Cross-site scripting vulnerability in the parser for Gadu-Gadu allows remote attackers to inject arbitrary web script or...

Check if your code is affected by 2004 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now