2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-1880 | — | — | 1.8% | Dec 31, 2004 | Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service... |
| CVE-2004-2405 | — | — | 1.7% | Dec 31, 2004 | Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote ... |
| CVE-2004-1966 | — | — | 1.3% | Dec 31, 2004 | Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execu... |
| CVE-2004-2403 | — | — | 2.8% | Dec 31, 2004 | Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized ... |
| CVE-2004-1860 | — | — | 3.3% | Dec 31, 2004 | Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to caus... |
| CVE-2004-2474 | — | — | 1.2% | Dec 31, 2004 | SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid param... |
| CVE-2004-1962 | — | — | 1.2% | Dec 31, 2004 | SQL injection vulnerability in index.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection filt... |
| CVE-2004-2401 | — | — | 3.5% | Dec 31, 2004 | Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute ... |
| CVE-2004-1960 | — | — | 1.7% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in blocker_query.php in Protector System 1.15b1 allows remote attackers to inje... |
| CVE-2004-2400 | — | — | 0.3% | Dec 31, 2004 | WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local us... |
| CVE-2004-1958 | — | — | 2.4% | Dec 31, 2004 | Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files ... |
| CVE-2004-2399 | — | — | 1.2% | Dec 31, 2004 | Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (CPU consumptio... |
| CVE-2004-2719 | — | — | 7.0% | Dec 31, 2004 | Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote attackers to execute arbitrar... |
| CVE-2004-2649 | — | — | 2.5% | Dec 31, 2004 | Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of char... |
| CVE-2004-1955 | — | — | 1.3% | Dec 31, 2004 | SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via... |
| CVE-2004-1953 | — | — | 3.3% | Dec 31, 2004 | phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which re... |
| CVE-2004-2396 | — | — | 0.4% | Dec 31, 2004 | passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that ... |
| CVE-2004-1951 | — | — | 8.1% | Dec 31, 2004 | xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite a... |
| CVE-2004-2395 | — | — | 0.3% | Dec 31, 2004 | Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of fa... |
| CVE-2004-1949 | — | — | 2.0% | Dec 31, 2004 | SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the s... |
| CVE-2004-2394 | — | — | 0.4% | Dec 31, 2004 | Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters... |
| CVE-2004-2112 | — | — | 3.6% | Dec 31, 2004 | Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via ".." (dot dot... |
| CVE-2004-2393 | — | — | 2.1% | Dec 31, 2004 | Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client o... |
| CVE-2004-2392 | — | — | 1.5% | Dec 31, 2004 | libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, rel... |
| CVE-2004-2113 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or ... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now