2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-2020 | — | — | 1.4% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 6.x through 7.3 allow remote attackers to inject arbitra... |
| CVE-2004-2019 | — | — | 1.7% | Dec 31, 2004 | The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid s... |
| CVE-2004-2018 | — | — | 3.8% | Dec 31, 2004 | PHP remote file inclusion vulnerability in index.php in Php-Nuke 6.x through 7.3 allows remote attackers to execute arbi... |
| CVE-2004-2017 | — | — | 2.8% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0 allow remote attackers to inje... |
| CVE-2004-2016 | — | — | 3.2% | Dec 31, 2004 | Stack-based buffer overflow in the HTTP server in NetChat 7.3 and earlier allows remote attackers to execute arbitrary c... |
| CVE-2004-2015 | — | — | 1.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in WebCT Campus Edition allows remote attackers to inject arbitrary HTML or web... |
| CVE-2004-2014 | — | — | 1.0% | Dec 31, 2004 | Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being do... |
| CVE-2004-2474 | — | — | 1.2% | Dec 31, 2004 | SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid param... |
| CVE-2004-2011 | — | — | 7.4% | Dec 31, 2004 | msxml3.dll in Internet Explorer 6.0.2600.0 allows remote attackers to cause a denial of service (crash) via a single & (... |
| CVE-2004-2010 | — | — | 2.6% | Dec 31, 2004 | PHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote attackers to execute arb... |
| CVE-2004-2425 | — | — | 13.5% | Dec 31, 2004 | Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary co... |
| CVE-2004-2424 | — | — | 1.8% | Dec 31, 2004 | BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (networ... |
| CVE-2004-2624 | — | — | 1.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in "TextSearch" in WackoWiki 3.5 allows remote attackers to inject arbitrary we... |
| CVE-2004-2423 | — | — | 4.9% | Dec 31, 2004 | Unknown vulnerability in the Web calendaring component of Ipswitch IMail Server before 8.13 allows remote attackers to c... |
| CVE-2004-1880 | — | — | 1.8% | Dec 31, 2004 | Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service... |
| CVE-2004-2422 | — | — | 7.1% | Dec 31, 2004 | Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service (crash) via (... |
| CVE-2004-2623 | — | — | 1.9% | Dec 31, 2004 | Unknown vulnerability in Rippy the Aggregator before 0.10, when register_globals is enabled, has unknown attack vectors ... |
| CVE-2004-2421 | — | — | 1.9% | Dec 31, 2004 | Unknown vulnerability in Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6 and 7, when running on ... |
| CVE-2004-1885 | — | — | 3.5% | Dec 31, 2004 | Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE... |
| CVE-2004-2420 | — | — | 1.8% | Dec 31, 2004 | Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6 and 7 allows remote attackers to cause a denial ... |
| CVE-2004-2621 | — | — | 0.7% | Dec 31, 2004 | Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does not check the gateway cer... |
| CVE-2004-2419 | — | — | 0.3% | Dec 31, 2004 | Keene Digital Media Server 1.0.2 allows local users to obtain usernames and passwords by reading the dmscore.db file on ... |
| CVE-2004-1892 | — | — | 10.0% | Dec 31, 2004 | Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, a... |
| CVE-2004-2113 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or ... |
| CVE-2004-2115 | — | — | 58.4% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attacker... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now