2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-1497 | — | — | 0.3% | Dec 31, 2004 | Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local user... |
| CVE-2004-1496 | — | — | 1.5% | Dec 31, 2004 | Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary ... |
| CVE-2004-1495 | — | — | 1.3% | Dec 31, 2004 | The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via a... |
| CVE-2004-1666 | — | — | 9.9% | Dec 31, 2004 | Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long strin... |
| CVE-2004-2540 | — | — | 2.5% | Dec 31, 2004 | readObject in (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.0 through 1.4.2_05 allows re... |
| CVE-2004-1492 | — | — | 1.7% | Dec 31, 2004 | Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (game exit) via a data packet... |
| CVE-2004-1491 | — | — | 12.6% | Dec 31, 2004 | Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitr... |
| CVE-2004-1490 | — | — | 2.5% | Dec 31, 2004 | Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spac... |
| CVE-2004-1489 | — | — | 2.0% | Dec 31, 2004 | Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remot... |
| CVE-2004-1146 | — | — | 1.4% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote ... |
| CVE-2004-1486 | — | — | 3.7% | Dec 31, 2004 | Unknown vulnerability in Serviceguard A.11.13 through A.11.16.00 and Cluster Object Manager A.01.03 and B.01.04 through ... |
| CVE-2004-1485 | — | — | 2.5% | Dec 31, 2004 | Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via ... |
| CVE-2004-1484 | — | — | 7.3% | Dec 31, 2004 | Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy cli... |
| CVE-2004-1483 | — | — | 2.4% | Dec 31, 2004 | Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.... |
| CVE-2004-1482 | — | — | 1.9% | Dec 31, 2004 | The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow remote attackers to bypass a... |
| CVE-2004-1481 | — | — | 4.3% | Dec 31, 2004 | Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Wi... |
| CVE-2004-1480 | — | — | 2.6% | Dec 31, 2004 | Unknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and earlier allows remote attack... |
| CVE-2004-1478 | — | — | 3.4% | Dec 31, 2004 | JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixati... |
| CVE-2004-1477 | — | — | 2.6% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbitr... |
| CVE-2004-1476 | — | — | 2.3% | Dec 31, 2004 | Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows a... |
| CVE-2004-1475 | — | — | 8.4% | Dec 31, 2004 | Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) ... |
| CVE-2004-1474 | — | — | 3.2% | Dec 31, 2004 | Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 36... |
| CVE-2004-1473 | — | — | 3.9% | Dec 31, 2004 | Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 36... |
| CVE-2004-1472 | — | — | 3.7% | Dec 31, 2004 | Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to ca... |
| CVE-2004-2251 | — | — | 2.1% | Dec 31, 2004 | The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it easier for ... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now