2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-2601 | — | — | 1.5% | Dec 31, 2004 | PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) allows remote attackers to read local files an... |
| CVE-2004-2376 | — | — | 3.8% | Dec 31, 2004 | Buffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to cause a denial of s... |
| CVE-2004-1914 | — | — | 1.7% | Dec 31, 2004 | SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execut... |
| CVE-2004-2474 | — | — | 1.2% | Dec 31, 2004 | SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid param... |
| CVE-2004-1912 | — | — | 3.5% | Dec 31, 2004 | The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCalen... |
| CVE-2004-1911 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script ... |
| CVE-2004-1910 | — | — | 3.4% | Dec 31, 2004 | rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service (crash) via a long string to ... |
| CVE-2004-1909 | — | — | 1.4% | Dec 31, 2004 | Claim Anti-Virus (ClamAV) 0.68 and earlier allows remote attackers to cause a denial of service (crash) via certain RAR ... |
| CVE-2004-1908 | — | — | 3.4% | Dec 31, 2004 | McFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain sensitive information via ... |
| CVE-2004-1907 | — | — | 6.7% | Dec 31, 2004 | The Web Filtering functionality in Kerio Personal Firewall (KPF) 4.0.13 allows remote attackers to cause a denial of ser... |
| CVE-2004-1906 | — | — | 4.0% | Dec 31, 2004 | Mcafee FreeScan allows remote attackers to cause a denial of service and possibly arbitrary code via a long string in th... |
| CVE-2004-1905 | — | — | 1.7% | Dec 31, 2004 | ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash) by calling the SetSit... |
| CVE-2004-1904 | — | — | 4.9% | Dec 31, 2004 | Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Inter... |
| CVE-2004-1903 | — | — | 7.6% | Dec 31, 2004 | Buffer overflow in blaxxun 3D 7.0 allows remote attackers to execute arbitrary code via a long URL property inside an ob... |
| CVE-2004-1902 | — | — | 0.4% | Dec 31, 2004 | The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords... |
| CVE-2004-1900 | — | — | 3.8% | Dec 31, 2004 | Format string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier allows remote attacker... |
| CVE-2004-1899 | — | — | 1.7% | Dec 31, 2004 | The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST... |
| CVE-2004-1898 | — | — | 16.6% | Dec 31, 2004 | Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute ... |
| CVE-2004-1897 | — | — | 8.7% | Dec 31, 2004 | Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fau... |
| CVE-2004-2113 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or ... |
| CVE-2004-1895 | — | — | 0.3% | Dec 31, 2004 | YaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via a symlink attack on you... |
| CVE-2004-1894 | — | — | 0.4% | Dec 31, 2004 | TEXutil in ConTEXt, when executed with the --silent option, allows local users to overwrite arbitrary files via a symlin... |
| CVE-2004-1893 | — | — | 2.4% | Dec 31, 2004 | Dreamweaver MX, when "Using Driver On Testing Server" or "Using DSN on Testing Server" is selected, uploads the mmhttpdb... |
| CVE-2004-1892 | — | — | 10.0% | Dec 31, 2004 | Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, a... |
| CVE-2004-2115 | — | — | 58.4% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attacker... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now