2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-2511 | — | — | 5.3% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arb... |
| CVE-2004-2191 | — | — | 1.4% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to... |
| CVE-2004-2192 | — | — | 1.5% | Dec 31, 2004 | SQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to execute ... |
| CVE-2004-2512 | — | — | 4.6% | Dec 31, 2004 | CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP res... |
| CVE-2004-2668 | — | — | 1.0% | Dec 31, 2004 | SQL injection vulnerability in Interchange before 4.8.9 allows remote attackers to execute arbitrary SQL commands via un... |
| CVE-2004-2746 | — | — | 3.0% | Dec 31, 2004 | SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitra... |
| CVE-2004-2193 | — | — | 1.4% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in trade.php for CJOverkill 4.0.3 allows remote attackers to inject arbitrary w... |
| CVE-2004-2194 | — | — | 2.1% | Dec 31, 2004 | MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denial... |
| CVE-2004-2513 | — | — | 9.8% | Dec 31, 2004 | Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via... |
| CVE-2004-2195 | — | — | 1.7% | Dec 31, 2004 | PHP remote file inclusion vulnerability in index.php in Zanfi CMS lite 1.1 allows remote attackers to execute arbitrary ... |
| CVE-2004-2196 | — | — | 2.3% | Dec 31, 2004 | Zanfi CMS lite 1.1 allows remote attackers to obtain the full path of the web server via direct requests without require... |
| CVE-2004-2514 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in modules/private_messages/index.php in PowerPortal 1.x allows remote attacker... |
| CVE-2004-2669 | — | — | 1.6% | Dec 31, 2004 | Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL com... |
| CVE-2004-2197 | — | — | 0.3% | Dec 31, 2004 | kdocker.cpp in kdocker 0.1 through 0.8 does not properly check the ownership of files, which could allow local users to ... |
| CVE-2004-2198 | — | — | 6.1% | Dec 31, 2004 | account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by... |
| CVE-2004-2515 | — | — | 0.5% | Dec 31, 2004 | Format string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated privileges, might allow loc... |
| CVE-2004-2199 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in DUware DUclassified 4.0 allows remote attackers to inject arbitrary web scri... |
| CVE-2004-2200 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to inject arbitrary w... |
| CVE-2004-2516 | — | — | 8.4% | Dec 31, 2004 | Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET ... |
| CVE-2004-2670 | — | — | 2.1% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitra... |
| CVE-2004-2747 | — | — | 1.2% | Dec 31, 2004 | Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versio... |
| CVE-2004-2296 | — | — | 1.7% | Dec 31, 2004 | The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote... |
| CVE-2004-2201 | — | — | 1.3% | Dec 31, 2004 | SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands ... |
| CVE-2004-2202 | — | — | 1.5% | Dec 31, 2004 | Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authenti... |
| CVE-2004-2517 | — | — | 3.6% | Dec 31, 2004 | myServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST request in a View=Logon... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now