2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-1863 | — | — | 2.1% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allow r... |
| CVE-2004-2474 | — | — | 1.2% | Dec 31, 2004 | SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid param... |
| CVE-2004-2351 | — | — | 1.3% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web scrip... |
| CVE-2004-1860 | — | — | 3.3% | Dec 31, 2004 | Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to caus... |
| CVE-2004-2350 | — | — | 1.2% | Dec 31, 2004 | SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL a... |
| CVE-2004-1858 | — | — | 1.2% | Dec 31, 2004 | HP Web Jetadmin 7.5.2546 allows remote attackers to cause a denial of service (crash) via a malformed request, possibly ... |
| CVE-2004-2349 | — | — | 1.2% | Dec 31, 2004 | Multiple SQL injection vulnerabilities in Tunez before 1.20-pre2 allow remote attackers to execute arbitrary SQL queries... |
| CVE-2004-2348 | — | — | 1.6% | Dec 31, 2004 | Sybari AntiGen for Domino 7.0 Build 722 SR2 allows remote attackers to cause a denial of service (hang) via an encrypted... |
| CVE-2004-1788 | — | — | 2.5% | Dec 31, 2004 | ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which all... |
| CVE-2004-2113 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or ... |
| CVE-2004-2347 | — | — | 9.9% | Dec 31, 2004 | blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metach... |
| CVE-2004-2346 | — | — | 0.9% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Forum Web Server 1.6 and earlier allow remote attackers to inject... |
| CVE-2004-1790 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote at... |
| CVE-2004-2345 | — | — | 1.4% | Dec 31, 2004 | Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4 allow local users wi... |
| CVE-2004-2585 | — | — | 1.4% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows rem... |
| CVE-2004-1848 | — | — | 8.1% | Dec 31, 2004 | Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file siz... |
| CVE-2004-2344 | — | — | 3.0% | Dec 31, 2004 | Unknown vulnerability in the ASN.1/H.323/H.225 stack of VocalTec VGW120 and VGW480 allows remote attackers to cause a de... |
| CVE-2004-2115 | — | — | 58.4% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attacker... |
| CVE-2004-1845 | — | — | 2.2% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary ... |
| CVE-2004-1844 | — | — | 1.8% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web... |
| CVE-2004-2342 | — | — | 1.9% | Dec 31, 2004 | ChatterBox 2.0 allows remote attackers to cause a denial of service (server crash) via a malformed request to the server... |
| CVE-2004-1841 | — | — | 1.3% | Dec 31, 2004 | SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via ... |
| CVE-2004-2341 | — | — | 2.8% | Dec 31, 2004 | PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary cod... |
| CVE-2004-2340 | — | — | 1.3% | Dec 31, 2004 | ** UNVERIFIABLE ** SQL injection vulnerability in PunkBuster Screenshot Database (PB-DB) Alpha 6 allows remote attacker... |
| CVE-2004-2475 | — | — | 3.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web scr... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now