2004 CVE Vulnerabilities

2,707 CVEs published in 2004.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2004-2440——Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (...
CVE-2004-2632——phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain unauthorized access to My...
CVE-2004-2441——Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related...
CVE-2004-2442——Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows S...
CVE-2004-2633——Unspecified vulnerability in Sesamie 1.0 allows remote anonymous attackers to gain access to repositories of other users...
CVE-2004-2728——Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated users to cause a ...
CVE-2004-2443——Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie se...
CVE-2004-2444——Cross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script...
CVE-2004-2634——The (1) bos.rte.serv_aid or (2) bos.rte.console filesets in IBM AIX 5.1 and 5.2 allow local users to overwrite arbitrary...
CVE-2004-2445——Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .....
CVE-2004-2446——Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a "....
CVE-2004-2635——An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows r...
CVE-2004-2729——Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute arbitrary code by chan...
CVE-2004-2447——Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web s...
CVE-2004-2448——S-Mart Shopping Cart or RediCart 3.9.5b stores smart.cfg under the web document root with insufficient access control, w...
CVE-2004-2636——TinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL.
CVE-2004-2449——Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial ...
CVE-2004-2450——The client and server for Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier report sensitive...
CVE-2004-2637——The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound con...
CVE-2004-2730——Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4...
CVE-2004-2676——The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not drop privileges when u...
CVE-2004-2451——Roger Wilco 1.4.1.6 and earlier, or Roger Wilco Base Station 0.30a or earlier, allows remote attackers to send audio to ...
CVE-2004-2452——Unknown vulnerability in Hitachi Cosminexus Portal Framework 01-00, 01-01, 01-02, 02-01, 02-02, 02-03, and other version...
CVE-2004-2638——The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" director...
CVE-2004-2453——Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is enabled, has unknown im...

Check if your code is affected by 2004 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now