2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-2429 | — | — | 4.6% | Dec 31, 2004 | Multiple stack-based and heap-based buffer overflows in EnderUNIX spamGuard before 1.7-BETA allow remote attackers to ex... |
| CVE-2004-2627 | — | — | 6.3% | Dec 31, 2004 | Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Vi... |
| CVE-2004-2430 | — | — | 0.4% | Dec 31, 2004 | Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a v... |
| CVE-2004-2431 | — | — | 2.5% | Dec 31, 2004 | Unknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, allo... |
| CVE-2004-2628 | — | — | 3.6% | Dec 31, 2004 | Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers to... |
| CVE-2004-2432 | — | — | 2.5% | Dec 31, 2004 | WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service (crash) via a request for a file with a l... |
| CVE-2004-2433 | — | — | 4.2% | Dec 31, 2004 | Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier, ... |
| CVE-2004-2629 | — | — | 2.3% | Dec 31, 2004 | Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express (wh... |
| CVE-2004-2434 | — | — | 32.8% | Dec 31, 2004 | Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with... |
| CVE-2004-2435 | — | — | 1.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled" ... |
| CVE-2004-2630 | — | — | 2.9% | Dec 31, 2004 | The MIME transformation system (transformations/text_plain__external.inc.php) in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows... |
| CVE-2004-2726 | — | — | 2.8% | Dec 31, 2004 | HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which a... |
| CVE-2004-2727 | — | — | 3.6% | Dec 31, 2004 | Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a deni... |
| CVE-2004-1551 | — | — | 2.6% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attack... |
| CVE-2004-2177 | — | — | 1.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to inject arbitrary web scri... |
| CVE-2004-2170 | — | — | 3.5% | Dec 31, 2004 | Directory traversal vulnerability in sample_showcode.html in Caravan 2.00/03d and earlier allows remote attackers to rea... |
| CVE-2004-2436 | — | — | 0.5% | Dec 31, 2004 | Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndA... |
| CVE-2004-2437 | — | — | 1.2% | Dec 31, 2004 | SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstar... |
| CVE-2004-2631 | — | — | 9.4% | Dec 31, 2004 | Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote at... |
| CVE-2004-2438 | — | — | 1.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HT... |
| CVE-2004-2439 | — | — | 2.2% | Dec 31, 2004 | The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote att... |
| CVE-2004-2632 | — | — | 3.8% | Dec 31, 2004 | phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain unauthorized access to My... |
| CVE-2004-2728 | — | — | 1.3% | Dec 31, 2004 | Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated users to cause a ... |
| CVE-2004-2440 | — | — | 0.3% | Dec 31, 2004 | Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (... |
| CVE-2004-2441 | — | — | 1.7% | Dec 31, 2004 | Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now