2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-2476 | — | — | 9.1% | Dec 31, 2004 | Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite loop and crash) via an IF... |
| CVE-2004-2650 | — | — | 0.6% | Dec 31, 2004 | Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by trigger... |
| CVE-2004-2737 | — | — | 1.0% | Dec 31, 2004 | SQL injection vulnerability in problist.asp in NetSupport DNA HelpDesk 1.01 allows remote attackers to execute arbitrary... |
| CVE-2004-2477 | — | — | 0.4% | Dec 31, 2004 | DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the ... |
| CVE-2004-2118 | — | — | 1.9% | Dec 31, 2004 | Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via a GET request with a long filename, pos... |
| CVE-2004-1557 | — | — | 1.5% | Dec 31, 2004 | MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a... |
| CVE-2004-2119 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Tiny Server 1.1 allows remote attackers to inject arbitrary web script or HT... |
| CVE-2004-2478 | — | — | 2.4% | Dec 31, 2004 | Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unic... |
| CVE-2004-2651 | — | — | 1.5% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in YaCy before 0.32 allow remote attackers to inject arbitrary web s... |
| CVE-2004-1517 | — | — | 1.6% | Dec 31, 2004 | Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant mes... |
| CVE-2004-2121 | — | — | 3.1% | Dec 31, 2004 | Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to rea... |
| CVE-2004-2479 | — | — | 2.1% | Dec 31, 2004 | Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostn... |
| CVE-2004-2652 | — | — | 11.2% | Dec 31, 2004 | The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbo... |
| CVE-2004-2123 | — | — | 0.9% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Nextplace.com E-Commerce ASP Engine allow remote attackers to inj... |
| CVE-2004-2124 | — | — | 7.4% | Dec 31, 2004 | The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POS... |
| CVE-2004-2480 | — | — | 3.0% | Dec 31, 2004 | Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via ... |
| CVE-2004-2738 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in check_user_id.php in ZeroBoard 4.1pl4 and earlier allows remote attackers to... |
| CVE-2004-1505 | — | — | 2.0% | Dec 31, 2004 | Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read... |
| CVE-2004-2125 | — | — | 0.4% | Dec 31, 2004 | Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protect... |
| CVE-2004-2126 | — | — | 0.4% | Dec 31, 2004 | The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.ini... |
| CVE-2004-2481 | — | — | 2.1% | Dec 31, 2004 | MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, p... |
| CVE-2004-2482 | — | — | 12.8% | Dec 31, 2004 | Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwar... |
| CVE-2004-2128 | — | — | 2.3% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as ot... |
| CVE-2004-2653 | — | — | 1.1% | Dec 31, 2004 | Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain privileges via unknown vectors in... |
| CVE-2004-1725 | — | — | 3.8% | Dec 31, 2004 | Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file. |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now