2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-1787 | — | — | 1.3% | Dec 31, 2004 | SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search q... |
| CVE-2004-2312 | — | — | 1.1% | Dec 31, 2004 | Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long C... |
| CVE-2004-2311 | — | — | 1.1% | Dec 31, 2004 | Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or deter... |
| CVE-2004-2570 | — | — | 3.0% | Dec 31, 2004 | Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript... |
| CVE-2004-1783 | — | — | 2.8% | Dec 31, 2004 | Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary ... |
| CVE-2004-1781 | — | — | 0.7% | Dec 31, 2004 | Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMD_CRED... |
| CVE-2004-2113 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or ... |
| CVE-2004-1779 | — | — | 1.3% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject ar... |
| CVE-2004-2308 | — | — | 1.7% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrar... |
| CVE-2004-1777 | — | — | 1.7% | Dec 31, 2004 | A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of servi... |
| CVE-2004-2307 | — | — | 14.5% | Dec 31, 2004 | Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) ... |
| CVE-2004-1775 | — | — | 1.7% | Dec 31, 2004 | Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 all... |
| CVE-2004-2306 | — | — | 0.3% | Dec 31, 2004 | Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a resu... |
| CVE-2004-1773 | — | — | 3.0% | Dec 31, 2004 | Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long outp... |
| CVE-2004-1772 | — | — | 0.6% | Dec 31, 2004 | Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o co... |
| CVE-2004-2305 | — | — | 2.7% | Dec 31, 2004 | Computer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus scanning by including a ... |
| CVE-2004-2304 | — | — | 3.8% | Dec 31, 2004 | Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a den... |
| CVE-2004-2696 | — | — | 1.3% | Dec 31, 2004 | BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Inte... |
| CVE-2004-2303 | — | — | 0.6% | Dec 31, 2004 | MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permission... |
| CVE-2004-1767 | — | — | 0.4% | Dec 31, 2004 | The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel module... |
| CVE-2004-2302 | — | — | 0.3% | Dec 31, 2004 | Race condition in the sysfs_read_file and sysfs_write_file functions in Linux kernel before 2.6.10 allows local users to... |
| CVE-2004-1765 | — | — | 4.7% | Dec 31, 2004 | Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows... |
| CVE-2004-2475 | — | — | 3.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web scr... |
| CVE-2004-2115 | — | — | 58.4% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attacker... |
| CVE-2004-2116 | — | — | 8.7% | Dec 31, 2004 | Directory traversal vulnerability in Tiny Server 1.1 allows remote attackers to read or download arbitrary files via a .... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now