2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-2204 | — | — | 0.3% | Dec 31, 2004 | Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject function or CFOBJECT tag ena... |
| CVE-2004-2518 | — | — | 4.5% | Dec 31, 2004 | Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a trailing null byte ("%00"... |
| CVE-2004-2671 | — | — | 1.6% | Dec 31, 2004 | mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct requests, and certai... |
| CVE-2004-2205 | — | — | 0.3% | Dec 31, 2004 | Unknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to gain root access via unspecified... |
| CVE-2004-2206 | — | — | 1.3% | Dec 31, 2004 | SQL injection vulnerability in NatterChat 1.12 allows remote attackers to execute arbitrary SQL commands via unknown vec... |
| CVE-2004-2519 | — | — | 8.0% | Dec 31, 2004 | Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service (CPU consumption) via directory specif... |
| CVE-2004-2207 | — | — | 1.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to inject ... |
| CVE-2004-2208 | — | — | 1.3% | Dec 31, 2004 | CRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to conduct HTTP respon... |
| CVE-2004-2520 | — | — | 3.3% | Dec 31, 2004 | POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial of service (applicatio... |
| CVE-2004-2672 | — | — | 1.3% | Dec 31, 2004 | Unspecified vulnerability in ArGoSoft FTP server before 1.4.2.2 allows attackers to upload .lnk files via unknown vector... |
| CVE-2004-2748 | — | — | 4.8% | Dec 31, 2004 | viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the insta... |
| CVE-2004-2209 | — | — | 1.2% | Dec 31, 2004 | SQL injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to execute arbitrary SQ... |
| CVE-2004-1581 | — | — | 1.2% | Dec 31, 2004 | BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) ... |
| CVE-2004-1582 | — | — | 1.7% | Dec 31, 2004 | PHP remote file inclusion vulnerability in BlackBoard 1.5.1 allows remote attackers to execute arbitrary PHP code by mod... |
| CVE-2004-2210 | — | — | 1.3% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Express-Web Content Management System (CMS) allow remote attacker... |
| CVE-2004-2521 | — | — | 1.8% | Dec 31, 2004 | Mail server in Gattaca Server 2003 1.1.10.0 allows remote attackers to perform a denial of service (application crash) v... |
| CVE-2004-1583 | — | — | 1.6% | Dec 31, 2004 | Directory traversal vulnerability in the FTP server in TriDComm 1.3 and earlier allows remote attackers to read or write... |
| CVE-2004-1584 | — | — | 11.2% | Dec 31, 2004 | CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting... |
| CVE-2004-2211 | — | — | 1.4% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in AliveSites Forums 2.0 allows remote attackers to inject arbitrary web script... |
| CVE-2004-1585 | — | — | 3.1% | Dec 31, 2004 | Flash Messaging 5.2.0g (rev 1.1.2) and earlier allows remote attackers to cause a denial of service (application crash) ... |
| CVE-2004-1586 | — | — | 0.8% | Dec 31, 2004 | Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g (rev... |
| CVE-2004-1580 | — | — | 2.4% | Dec 31, 2004 | SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via... |
| CVE-2004-1579 | — | — | 1.2% | Dec 31, 2004 | index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid ca... |
| CVE-2004-1578 | — | — | 1.1% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute a... |
| CVE-2004-2212 | — | — | 1.5% | Dec 31, 2004 | SQL injection vulnerability in forum.asp in AliveSites Forums 2.0 allows remote attackers to execute arbitrary SQL comma... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now