2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-2398 | — | — | 0.3% | Dec 31, 2004 | Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local user... |
| CVE-2004-2396 | — | — | 0.4% | Dec 31, 2004 | passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that ... |
| CVE-2004-2395 | — | — | 0.3% | Dec 31, 2004 | Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of fa... |
| CVE-2004-2394 | — | — | 0.4% | Dec 31, 2004 | Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters... |
| CVE-2004-2393 | — | — | 2.1% | Dec 31, 2004 | Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client o... |
| CVE-2004-2392 | — | — | 1.5% | Dec 31, 2004 | libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, rel... |
| CVE-2004-2391 | — | — | 1.6% | Dec 31, 2004 | Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of ... |
| CVE-2004-2390 | — | — | 1.4% | Dec 31, 2004 | The roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8, when usin... |
| CVE-2004-2389 | — | — | 1.8% | Dec 31, 2004 | Unknown vulnerability in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attack... |
| CVE-2004-2388 | — | — | 2.1% | Dec 31, 2004 | rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the ... |
| CVE-2004-2387 | — | — | 3.7% | Dec 31, 2004 | Buffer overflow in the HandleCPCCommand function of sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attac... |
| CVE-2004-2386 | — | — | 3.2% | Dec 31, 2004 | Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote att... |
| CVE-2004-2385 | — | — | 6.7% | Dec 31, 2004 | EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for ... |
| CVE-2004-2384 | — | — | 2.6% | Dec 31, 2004 | NullSoft Winamp 5.02 allows remote attackers to cause a denial of service (crash) by creating a file with a long filenam... |
| CVE-2004-2383 | — | — | 20.0% | Dec 31, 2004 | Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and cap... |
| CVE-2004-2382 | — | — | 1.6% | Dec 31, 2004 | The PerfectNav plugin for Microsoft Internet Explorer allows remote attackers to cause a denial of service (browser cras... |
| CVE-2004-2380 | — | — | 1.8% | Dec 31, 2004 | Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to w... |
| CVE-2004-2379 | — | — | 1.4% | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrary... |
| CVE-2004-2378 | — | — | 1.9% | Dec 31, 2004 | @Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server) via a large number of PO... |
| CVE-2004-2377 | — | — | 1.8% | Dec 31, 2004 | Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot) via certain network scans... |
| CVE-2004-2376 | — | — | 3.8% | Dec 31, 2004 | Buffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to cause a denial of s... |
| CVE-2004-2375 | — | — | 5.9% | Dec 31, 2004 | Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (cr... |
| CVE-2004-2374 | — | — | 2.8% | Dec 31, 2004 | BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php... |
| CVE-2004-2373 | — | — | 2.7% | Dec 31, 2004 | The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allo... |
| CVE-2004-2372 | — | — | 0.7% | Dec 31, 2004 | Buffer overflow in Bochs before 2.1.1, if installed setuid, allows local users to execute arbitrary code via a long HOME... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now