2004 CVE Vulnerabilities

2,707 CVEs published in 2004.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2004-1549——The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could all...
CVE-2004-1548——Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upl...
CVE-2004-1547——The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service (a...
CVE-2004-1546——Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a...
CVE-2004-1545——UploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache mod_mime, does not properly handle files with two ...
CVE-2004-1544——Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to exe...
CVE-2004-1543——Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arbi...
CVE-2004-1542——Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (ser...
CVE-2004-1541——SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// U...
CVE-2004-1540——ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does ...
CVE-2004-1539——Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long ...
CVE-2004-1538——SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary S...
CVE-2004-1537——Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute ...
CVE-2004-1536——SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board (IPB) 1.x and 2.x allows rem...
CVE-2004-1534——ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of servi...
CVE-2004-1533——Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (s...
CVE-2004-1532——AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.
CVE-2004-1531——SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to exe...
CVE-2004-1530——SQL injection vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary ...
CVE-2004-1529——Cross-site scripting (XSS) vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execu...
CVE-2004-1528——The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HTTP request to...
CVE-2004-2229——Multiple unknown vulnerabilities in Oracle 9i Lite Mobile Server 5.0.0.0.0 through 5.0.2.9.0 allow remote authenticated ...
CVE-2004-1526——Hired Team: Trial 2.0 and earlier and 2.200 does not limit how game players can kick other players off the server, inclu...
CVE-2004-1525——Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) via...
CVE-2004-2530——Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files vi...

Check if your code is affected by 2004 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now