2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-1418 | — | — | 1.8% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers to inject arbitrary web ... |
| CVE-2004-1417 | — | — | 1.9% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to i... |
| CVE-2004-1416 | — | — | 1.9% | Dec 31, 2004 | pnxr3260.dll in the RealOne 2.0 build 6.0.11.868 browser plugin, as used in Internet Explorer, allows remote attackers t... |
| CVE-2004-1415 | — | — | 1.2% | Dec 31, 2004 | SQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal 2.4 and 2.5.1 allows remote att... |
| CVE-2004-1414 | — | — | 1.3% | Dec 31, 2004 | Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service (application hang) via a message that conta... |
| CVE-2004-1413 | — | — | 1.1% | Dec 31, 2004 | Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands v... |
| CVE-2004-1412 | — | — | 1.7% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrary... |
| CVE-2004-1411 | — | — | 1.3% | Dec 31, 2004 | Gadu-Gadu build 155 and earlier allows remote attackers to cause a denial of service (infinite loop) via a message that ... |
| CVE-2004-1410 | — | — | 1.7% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary ... |
| CVE-2004-1409 | — | — | 1.0% | Dec 31, 2004 | Multiple cross-site scripting vulnerabilities in Image Gallery Web Application 0.9.10 allow remote attackers to inject a... |
| CVE-2004-1408 | — | — | 1.5% | Dec 31, 2004 | The addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly check filenames, which... |
| CVE-2004-1407 | — | — | 1.6% | Dec 31, 2004 | Multiple directory traversal vulnerabilities in singapore Image Gallery Web Application 0.9.10 allow remote attackers to... |
| CVE-2004-1406 | — | — | 2.4% | Dec 31, 2004 | SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrar... |
| CVE-2004-1405 | — | — | 5.2% | Dec 31, 2004 | MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, su... |
| CVE-2004-1404 | — | — | 2.9% | Dec 31, 2004 | Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, does not properly handle files with multiple fil... |
| CVE-2004-1403 | — | — | 1.7% | Dec 31, 2004 | PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arb... |
| CVE-2004-1402 | — | — | 3.3% | Dec 31, 2004 | SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string pa... |
| CVE-2004-1401 | — | — | 2.7% | Dec 31, 2004 | SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and b... |
| CVE-2004-1400 | — | — | 7.2% | Dec 31, 2004 | The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unaut... |
| CVE-2004-1399 | — | — | 1.7% | Dec 31, 2004 | Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows remote attackers to read ... |
| CVE-2004-1398 | — | — | 0.4% | Dec 31, 2004 | Format string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and p... |
| CVE-2004-1397 | — | — | 1.3% | Dec 31, 2004 | Cross-site scripting (XSS) vulnerability in UseModWiki 1.0 allows remote attackers to inject arbitrary web script or HTM... |
| CVE-2004-1396 | — | — | 3.1% | Dec 31, 2004 | Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service (application crash or CPU ... |
| CVE-2004-1395 | — | — | 3.8% | Dec 31, 2004 | The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron ... |
| CVE-2004-1394 | — | — | 0.3% | Dec 31, 2004 | The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in ... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now