2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-1550 | — | — | 18.6% | Dec 31, 2004 | Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an adm... |
| CVE-2004-1549 | — | — | 1.6% | Dec 31, 2004 | The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could all... |
| CVE-2004-1548 | — | — | 1.8% | Dec 31, 2004 | Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upl... |
| CVE-2004-1547 | — | — | 2.1% | Dec 31, 2004 | The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service (a... |
| CVE-2004-1546 | — | — | 31.1% | Dec 31, 2004 | Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a... |
| CVE-2004-1545 | — | — | 2.6% | Dec 31, 2004 | UploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache mod_mime, does not properly handle files with two ... |
| CVE-2004-1544 | — | — | 1.3% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to exe... |
| CVE-2004-1543 | — | — | 7.1% | Dec 31, 2004 | Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arbi... |
| CVE-2004-1542 | — | — | 3.5% | Dec 31, 2004 | Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (ser... |
| CVE-2004-1541 | — | — | 2.1% | Dec 31, 2004 | SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// U... |
| CVE-2004-1540 | — | — | 6.6% | Dec 31, 2004 | ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does ... |
| CVE-2004-1539 | — | — | 3.1% | Dec 31, 2004 | Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long ... |
| CVE-2004-1538 | — | — | 1.3% | Dec 31, 2004 | SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary S... |
| CVE-2004-1537 | — | — | 1.8% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute ... |
| CVE-2004-1536 | — | — | 2.4% | Dec 31, 2004 | SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board (IPB) 1.x and 2.x allows rem... |
| CVE-2004-1534 | — | — | 1.8% | Dec 31, 2004 | ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of servi... |
| CVE-2004-1533 | — | — | 7.5% | Dec 31, 2004 | Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (s... |
| CVE-2004-1532 | — | — | 1.5% | Dec 31, 2004 | AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access. |
| CVE-2004-1531 | — | — | 1.3% | Dec 31, 2004 | SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to exe... |
| CVE-2004-1530 | — | — | 1.3% | Dec 31, 2004 | SQL injection vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary ... |
| CVE-2004-1529 | — | — | 1.4% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execu... |
| CVE-2004-2529 | — | — | 1.6% | Dec 31, 2004 | Gadu-Gadu allows remote attackers to bypass the "image send" option by sending a very small image file, which could be u... |
| CVE-2004-1527 | — | — | 1.4% | Dec 31, 2004 | Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can ... |
| CVE-2004-1526 | — | — | 1.1% | Dec 31, 2004 | Hired Team: Trial 2.0 and earlier and 2.200 does not limit how game players can kick other players off the server, inclu... |
| CVE-2004-2227 | — | — | 1.8% | Dec 31, 2004 | Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote at... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now