2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-2105 | — | — | 1.9% | Dec 31, 2004 | The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt fi... |
| CVE-2004-2114 | — | — | 7.6% | Dec 31, 2004 | Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary co... |
| CVE-2004-2141 | — | — | — | Dec 31, 2004 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-1827. Reason: This candidate is a duplicate of... |
| CVE-2004-2183 | — | — | 1.8% | Dec 31, 2004 | Unknown vulnerability in WeHelpBUS 0.1 allows remote attackers to execute arbitrary shell commands via the query string. |
| CVE-2004-2285 | — | — | — | Dec 31, 2004 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-2022. Reason: This candidate is a duplicate of... |
| CVE-2004-2404 | — | — | — | Dec 31, 2004 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-2347. Reason: This candidate is a duplicate of... |
| CVE-2004-2541 | — | — | 1.7% | Dec 31, 2004 | Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a... |
| CVE-2004-2622 | — | — | 2.6% | Dec 31, 2004 | AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server ... |
| CVE-2004-9998 | — | — | — | Dec 31, 2004 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate has been used as a placeho... |
| CVE-2004-9999 | — | — | — | Dec 31, 2004 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate has been used as a placeho... |
| CVE-2004-1376 | — | — | 8.9% | Dec 30, 2004 | Directory traversal vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote malicious FTP servers ... |
| CVE-2004-1316 | — | — | 3.4% | Dec 29, 2004 | Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote at... |
| CVE-2004-1062 | — | — | 1.2% | Dec 28, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and... |
| CVE-2004-1317 | — | — | 60.4% | Dec 27, 2004 | Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attack... |
| CVE-2004-1377 | — | — | 0.4% | Dec 27, 2004 | The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwri... |
| CVE-2004-0803 | — | — | 8.3% | Dec 23, 2004 | Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer over... |
| CVE-2004-0646 | — | — | 7.1% | Dec 23, 2004 | Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) ... |
| CVE-2004-0867 | — | — | 17.2% | Dec 23, 2004 | Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, ... |
| CVE-2004-0850 | — | — | 0.4% | Dec 23, 2004 | Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow l... |
| CVE-2004-0849 | — | — | 1.6% | Dec 23, 2004 | Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.... |
| CVE-2004-0842 | — | — | 56.6% | Dec 23, 2004 | Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service... |
| CVE-2004-0749 | — | — | 1.5% | Dec 23, 2004 | The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable... |
| CVE-2004-0841 | — | — | 48.7% | Dec 23, 2004 | Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.sho... |
| CVE-2004-0834 | — | — | 0.4% | Dec 23, 2004 | Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) m... |
| CVE-2004-0833 | — | — | 2.5% | Dec 23, 2004 | Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fi... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now