2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-2311 | — | — | 1.1% | Dec 31, 2004 | Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or deter... |
| CVE-2004-2570 | — | — | 3.0% | Dec 31, 2004 | Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript... |
| CVE-2004-2310 | — | — | 3.6% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbi... |
| CVE-2004-1783 | — | — | 2.8% | Dec 31, 2004 | Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary ... |
| CVE-2004-1781 | — | — | 0.7% | Dec 31, 2004 | Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMD_CRED... |
| CVE-2004-1780 | — | — | 0.4% | Dec 31, 2004 | Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authenticati... |
| CVE-2004-1779 | — | — | 1.3% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject ar... |
| CVE-2004-2308 | — | — | 1.7% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrar... |
| CVE-2004-1777 | — | — | 1.7% | Dec 31, 2004 | A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of servi... |
| CVE-2004-2307 | — | — | 14.5% | Dec 31, 2004 | Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) ... |
| CVE-2004-1775 | — | — | 1.7% | Dec 31, 2004 | Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 all... |
| CVE-2004-2306 | — | — | 0.3% | Dec 31, 2004 | Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a resu... |
| CVE-2004-1773 | — | — | 3.0% | Dec 31, 2004 | Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long outp... |
| CVE-2004-1772 | — | — | 0.6% | Dec 31, 2004 | Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o co... |
| CVE-2004-2304 | — | — | 3.8% | Dec 31, 2004 | Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a den... |
| CVE-2004-2566 | — | — | 1.7% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1) LiveForum, (2) LiveQ&A... |
| CVE-2004-2303 | — | — | 0.6% | Dec 31, 2004 | MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permission... |
| CVE-2004-1755 | — | — | 1.5% | Dec 31, 2004 | The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple c... |
| CVE-2004-1767 | — | — | 0.4% | Dec 31, 2004 | The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel module... |
| CVE-2004-2302 | — | — | 0.3% | Dec 31, 2004 | Race condition in the sysfs_read_file and sysfs_write_file functions in Linux kernel before 2.6.10 allows local users to... |
| CVE-2004-1765 | — | — | 4.7% | Dec 31, 2004 | Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows... |
| CVE-2004-2301 | — | — | 1.8% | Dec 31, 2004 | Eudora before 6.1.1 allows remote attackers to cause a denial of service (crash) via an e-mail with a long "To:" field, ... |
| CVE-2004-2475 | — | — | 3.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web scr... |
| CVE-2004-2649 | — | — | 2.5% | Dec 31, 2004 | Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of char... |
| CVE-2004-2736 | — | — | 5.4% | Dec 31, 2004 | Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cooki... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now