2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-2427 | — | — | 5.4% | Dec 31, 2004 | Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive inf... |
| CVE-2004-2626 | — | — | 3.4% | Dec 31, 2004 | GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SM... |
| CVE-2004-2725 | — | — | 1.8% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web sc... |
| CVE-2004-2428 | — | — | 1.5% | Dec 31, 2004 | Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, which allo... |
| CVE-2004-2429 | — | — | 4.6% | Dec 31, 2004 | Multiple stack-based and heap-based buffer overflows in EnderUNIX spamGuard before 1.7-BETA allow remote attackers to ex... |
| CVE-2004-2627 | — | — | 6.3% | Dec 31, 2004 | Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Vi... |
| CVE-2004-2430 | — | — | 0.4% | Dec 31, 2004 | Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a v... |
| CVE-2004-2431 | — | — | 2.5% | Dec 31, 2004 | Unknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, allo... |
| CVE-2004-2628 | — | — | 3.6% | Dec 31, 2004 | Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers to... |
| CVE-2004-2726 | — | — | 2.8% | Dec 31, 2004 | HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which a... |
| CVE-2004-2432 | — | — | 2.5% | Dec 31, 2004 | WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service (crash) via a request for a file with a l... |
| CVE-2004-2433 | — | — | 4.2% | Dec 31, 2004 | Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier, ... |
| CVE-2004-2629 | — | — | 2.3% | Dec 31, 2004 | Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express (wh... |
| CVE-2004-2434 | — | — | 32.8% | Dec 31, 2004 | Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with... |
| CVE-2004-2435 | — | — | 1.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled" ... |
| CVE-2004-2630 | — | — | 2.9% | Dec 31, 2004 | The MIME transformation system (transformations/text_plain__external.inc.php) in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows... |
| CVE-2004-2727 | — | — | 3.6% | Dec 31, 2004 | Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a deni... |
| CVE-2004-2676 | — | — | 0.3% | Dec 31, 2004 | The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not drop privileges when u... |
| CVE-2004-1479 | — | — | — | Dec 31, 2004 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0928. Reason: This candidate is a duplicate of... |
| CVE-2004-2174 | — | — | 1.8% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Custva.asp in EarlyImpact ProductCart allows remote attackers to inject arbi... |
| CVE-2004-2170 | — | — | 3.5% | Dec 31, 2004 | Directory traversal vulnerability in sample_showcode.html in Caravan 2.00/03d and earlier allows remote attackers to rea... |
| CVE-2004-2436 | — | — | 0.5% | Dec 31, 2004 | Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndA... |
| CVE-2004-2437 | — | — | 1.2% | Dec 31, 2004 | SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstar... |
| CVE-2004-2631 | — | — | 9.4% | Dec 31, 2004 | Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote at... |
| CVE-2004-2438 | — | — | 1.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HT... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now