2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-1471 | — | — | 7.7% | Dec 31, 2004 | Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attacker... |
| CVE-2004-1470 | — | — | 2.4% | Dec 31, 2004 | CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTT... |
| CVE-2004-1469 | — | — | 0.6% | Dec 31, 2004 | Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to exe... |
| CVE-2004-1468 | — | — | 3.6% | Dec 31, 2004 | The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell... |
| CVE-2004-1467 | — | — | 3.6% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to injec... |
| CVE-2004-1466 | — | — | 5.2% | Dec 31, 2004 | The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds... |
| CVE-2004-1465 | — | — | 1.1% | Dec 31, 2004 | Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, ... |
| CVE-2004-1463 | — | — | 2.3% | Dec 31, 2004 | Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknow... |
| CVE-2004-1462 | — | — | 1.6% | Dec 31, 2004 | Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator... |
| CVE-2004-1461 | — | — | 1.7% | Dec 31, 2004 | Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a random... |
| CVE-2004-2261 | — | — | 1.2% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in e107 allows remote attackers to inject arbitrary script or HTML via the "log... |
| CVE-2004-1459 | — | — | 1.8% | Dec 31, 2004 | Cisco Secure Access Control Server (ACS) 3.2, when configured as a Light Extensible Authentication Protocol (LEAP) RADIU... |
| CVE-2004-1458 | — | — | 1.8% | Dec 31, 2004 | The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote atta... |
| CVE-2004-1457 | — | — | 2.1% | Dec 31, 2004 | The Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of se... |
| CVE-2004-1456 | — | — | 14.0% | Dec 31, 2004 | filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo. |
| CVE-2004-1455 | — | — | 4.2% | Dec 31, 2004 | Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrar... |
| CVE-2004-1454 | — | — | 3.4% | Dec 31, 2004 | Cisco IOS 12.0S, 12.2, and 12.3, with Open Shortest Path First (OSPF) enabled, allows remote attackers to cause a denial... |
| CVE-2004-1453 | — | — | 0.4% | Dec 31, 2004 | GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use... |
| CVE-2004-1452 | — | — | 0.4% | Dec 31, 2004 | Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes ... |
| CVE-2004-1451 | — | — | 1.4% | Dec 31, 2004 | Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote ... |
| CVE-2004-1450 | — | — | 1.2% | Dec 31, 2004 | Unknown vulnerability in LiveConnect in Mozilla 1.7 beta allows remote attackers to read arbitrary files in known locati... |
| CVE-2004-1449 | — | — | 0.9% | Dec 31, 2004 | Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of ... |
| CVE-2004-1448 | — | — | 1.7% | Dec 31, 2004 | Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to uploa... |
| CVE-2004-1447 | — | — | 1.7% | Dec 31, 2004 | Jetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which could allow attackers ... |
| CVE-2004-2547 | — | — | 3.1% | Dec 31, 2004 | NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP request... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now