2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-2143 | — | — | 1.7% | Dec 31, 2004 | SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remot... |
| CVE-2004-2144 | — | — | 2.8% | Dec 31, 2004 | Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct reque... |
| CVE-2004-2489 | — | — | 0.4% | Dec 31, 2004 | Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrary... |
| CVE-2004-2656 | — | — | 1.4% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashc... |
| CVE-2004-2145 | — | — | 1.3% | Dec 31, 2004 | SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands ... |
| CVE-2004-2146 | — | — | 1.3% | Dec 31, 2004 | CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attac... |
| CVE-2004-2490 | — | — | 0.5% | Dec 31, 2004 | Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code ... |
| CVE-2004-2147 | — | — | 1.4% | Dec 31, 2004 | Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash)... |
| CVE-2004-2148 | — | — | 0.4% | Dec 31, 2004 | Unknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact... |
| CVE-2004-2491 | — | — | 6.3% | Dec 31, 2004 | A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been l... |
| CVE-2004-2657 | — | — | 0.3% | Dec 31, 2004 | Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, w... |
| CVE-2004-1453 | — | — | 0.4% | Dec 31, 2004 | GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use... |
| CVE-2004-2149 | — | — | 5.6% | Dec 31, 2004 | Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4 allows remote attackers ... |
| CVE-2004-2150 | — | — | 2.4% | Dec 31, 2004 | Nettica Corporation INTELLIPEER Email Server 1.01 displays different error messages for valid and invalid account names,... |
| CVE-2004-2492 | — | — | 1.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web (GmaxWWW) Desktop 5, 6, and Desktop for Jichitai 6, ... |
| CVE-2004-2151 | — | — | 3.5% | Dec 31, 2004 | Chatman 1.1.1 RC1 and earlier allows remote attackers to cause a denial of service (memory consumption or application cr... |
| CVE-2004-2152 | — | — | 1.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attacke... |
| CVE-2004-2493 | — | — | 1.3% | Dec 31, 2004 | Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichit... |
| CVE-2004-2658 | — | — | 0.3% | Dec 31, 2004 | resmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to spoof terminals and login t... |
| CVE-2004-2153 | — | — | 1.7% | Dec 31, 2004 | Multiple unknown vulnerabilities in Real Estate Management Software 1.0 have unknown impact and attack vectors. |
| CVE-2004-2155 | — | — | 1.6% | Dec 31, 2004 | Online-bookmarks before 0.4.6 allows remote attackers to bypass its authentication mechanism via a direct request to (1)... |
| CVE-2004-2494 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitra... |
| CVE-2004-2156 | — | — | 1.9% | Dec 31, 2004 | Multiple unknown vulnerabilities in Online Recruitment Agency 1.0 have unknown impact and attack vectors. |
| CVE-2004-2157 | — | — | 2.0% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly other versions before 0.7... |
| CVE-2004-2495 | — | — | 2.0% | Dec 31, 2004 | The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial o... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now