2004 CVE Vulnerabilities

2,707 CVEs published in 2004.

CVE IDSeverityCVSSDescription
CVE-2004-2649——Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of char...
CVE-2004-2046——Unknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote attackers to cause a denial of ...
CVE-2004-2045——The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to ...
CVE-2004-2442——Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows S...
CVE-2004-2441——Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related...
CVE-2004-2633——Unspecified vulnerability in Sesamie 1.0 allows remote anonymous attackers to gain access to repositories of other users...
CVE-2004-2440——Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (...
CVE-2004-1906——Mcafee FreeScan allows remote attackers to cause a denial of service and possibly arbitrary code via a long string in th...
CVE-2004-2439——The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote att...
CVE-2004-2632——phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain unauthorized access to My...
CVE-2004-2438——Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HT...
CVE-2004-1907——The Web Filtering functionality in Kerio Personal Firewall (KPF) 4.0.13 allows remote attackers to cause a denial of ser...
CVE-2004-2437——SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstar...
CVE-2004-2631——Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote at...
CVE-2004-2436——Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndA...
CVE-2004-2017——Multiple cross-site scripting (XSS) vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0 allow remote attackers to inje...
CVE-2004-2112——Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via ".." (dot dot...
CVE-2004-2435——Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled" ...
CVE-2004-2434——Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with...
CVE-2004-2727——Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a deni...
CVE-2004-2026——Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute...
CVE-2004-2025——SQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execu...
CVE-2004-2024——The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functi...
CVE-2004-2023——SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows re...
CVE-2004-2113——Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or ...

Check if your code is affected by 2004 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now