2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-2364 | — | — | 10.7% | Dec 31, 2004 | Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary c... |
| CVE-2004-1889 | — | — | 2.4% | Dec 31, 2004 | Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (ha... |
| CVE-2004-2474 | — | — | 1.2% | Dec 31, 2004 | SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid param... |
| CVE-2004-1887 | — | — | 3.8% | Dec 31, 2004 | Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an HTTP request with a t... |
| CVE-2004-1885 | — | — | 3.5% | Dec 31, 2004 | Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE... |
| CVE-2004-2362 | — | — | 1.7% | Dec 31, 2004 | PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the li... |
| CVE-2004-1883 | — | — | 5.2% | Dec 31, 2004 | Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary code... |
| CVE-2004-1882 | — | — | 4.0% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows remote attackers to inject arbit... |
| CVE-2004-1881 | — | — | 3.1% | Dec 31, 2004 | SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execut... |
| CVE-2004-1880 | — | — | 1.8% | Dec 31, 2004 | Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service... |
| CVE-2004-2113 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or ... |
| CVE-2004-1879 | — | — | 1.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows allows remote attackers to inject arbitrary web script ... |
| CVE-2004-2358 | — | — | 1.3% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in admin_words.php for phpBB 2.0.6c allows remote attackers to inject arbitrary... |
| CVE-2004-2592 | — | — | 3.7% | Dec 31, 2004 | Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (applica... |
| CVE-2004-2357 | — | — | 1.4% | Dec 31, 2004 | The embedded MySQL 4.0 server for Proofpoint Protection Server does not require a password for the root user of MySQL, w... |
| CVE-2004-2591 | — | — | 0.4% | Dec 31, 2004 | The data-overwrite capability of ButtUglySoftware CleanCache 2.19 does not properly overwrite data in files, which allow... |
| CVE-2004-1873 | — | — | 2.4% | Dec 31, 2004 | SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via ... |
| CVE-2004-2356 | — | — | 2.6% | Dec 31, 2004 | Early termination vulnerability in Fizmez Web Server 1.0 allows remote attackers to cause a denial of service (crash) by... |
| CVE-2004-2355 | — | — | 2.0% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Crafty Syntax Live Help (CSLH) before 2.7.4 allows remote attackers to injec... |
| CVE-2004-2590 | — | — | 1.9% | Dec 31, 2004 | Unspecified vulnerability in meindlSOFT Cute PHP Library (aka cphplib) 0.46 has unknown impact and attack vectors, relat... |
| CVE-2004-1869 | — | — | 1.7% | Dec 31, 2004 | Etherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause a denial of service (c... |
| CVE-2004-2354 | — | — | 1.5% | Dec 31, 2004 | SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL state... |
| CVE-2004-1867 | — | — | 1.7% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary we... |
| CVE-2004-2353 | — | — | 1.4% | Dec 31, 2004 | BugPort before 1.099 stores its configuration file (conf/config.conf) under the web document root with a file extension ... |
| CVE-2004-2115 | — | — | 58.4% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attacker... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now