2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-1837 | — | — | 1.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Mod_survey 3.0.x before 3.0.16-pre2 and 3.2.x before 3.2.0-pre4 allows remot... |
| CVE-2004-1836 | — | — | 4.4% | Dec 31, 2004 | SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers to... |
| CVE-2004-1835 | — | — | 4.9% | Dec 31, 2004 | Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrar... |
| CVE-2004-2337 | — | — | 0.3% | Dec 31, 2004 | The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local u... |
| CVE-2004-2336 | — | — | 2.2% | Dec 31, 2004 | Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1... |
| CVE-2004-1832 | — | — | 1.8% | Dec 31, 2004 | Buffer overflow in the GUI admin service in Mac OS X Server 10.3 allows remote attackers to cause a denial of service (c... |
| CVE-2004-1831 | — | — | 2.7% | Dec 31, 2004 | Buffer overflow in Chrome 1.2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet ... |
| CVE-2004-2335 | — | — | 0.4% | Dec 31, 2004 | The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver... |
| CVE-2004-2113 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or ... |
| CVE-2004-1828 | — | — | 2.4% | Dec 31, 2004 | Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote atta... |
| CVE-2004-2333 | — | — | 1.4% | Dec 31, 2004 | Bodington 2.1.0 RC1 and earlier does not secure the file upload area, which allows remote attackers to read uploaded fil... |
| CVE-2004-2580 | — | — | 1.3% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via un... |
| CVE-2004-2332 | — | — | 1.2% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in CPAN WWW::Form before 1.13 allow remote attackers to inject arbit... |
| CVE-2004-1824 | — | — | 2.6% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web... |
| CVE-2004-1823 | — | — | 2.2% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote attac... |
| CVE-2004-2330 | — | — | 1.6% | Dec 31, 2004 | ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP request containing a lar... |
| CVE-2004-2115 | — | — | 58.4% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attacker... |
| CVE-2004-2329 | — | — | 0.6% | Dec 31, 2004 | Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load but... |
| CVE-2004-2328 | — | — | 1.6% | Dec 31, 2004 | Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via a... |
| CVE-2004-1780 | — | — | 0.4% | Dec 31, 2004 | Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authenticati... |
| CVE-2004-2327 | — | — | 1.7% | Dec 31, 2004 | Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service (crash) via multiple malformed requests incl... |
| CVE-2004-2577 | — | — | 1.4% | Dec 31, 2004 | The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which... |
| CVE-2004-2326 | — | — | 1.4% | Dec 31, 2004 | SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to byp... |
| CVE-2004-1814 | — | — | 1.8% | Dec 31, 2004 | Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via .. ... |
| CVE-2004-2475 | — | — | 3.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web scr... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now