2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-1324 | — | — | 16.7% | Dec 18, 2004 | The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the... |
| CVE-2004-1374 | — | — | 0.4% | Dec 18, 2004 | Multiple buffer overflows in NetBSD kernel may allow local users to execute arbitrary code and gain privileges. |
| CVE-2004-1325 | — | — | 15.7% | Dec 18, 2004 | The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file doe... |
| CVE-2004-1768 | — | — | 2.1% | Dec 17, 2004 | The character converters in the Spamhunter and Language ID modules for Symantec Brightmail AntiSpam 6.0.1 before patch 1... |
| CVE-2004-1323 | — | — | 0.3% | Dec 16, 2004 | Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel c... |
| CVE-2004-1142 | — | — | 2.4% | Dec 15, 2004 | Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malfo... |
| CVE-2004-1333 | — | — | 1.0% | Dec 15, 2004 | Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a d... |
| CVE-2004-1334 | — | — | 0.5% | Dec 15, 2004 | Integer overflow in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial o... |
| CVE-2004-1319 | — | — | 26.2% | Dec 15, 2004 | The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by settin... |
| CVE-2004-1320 | — | — | 1.5% | Dec 15, 2004 | Asante FM2008 running firmware 1.06 is shipped with a default username and password, which could allow remote attackers ... |
| CVE-2004-1321 | — | — | 1.3% | Dec 15, 2004 | The configuration backup in Asante FM2008 running firmware 1.06 stores the username and password in cleartext, which cou... |
| CVE-2004-1145 | — | — | 4.1% | Dec 15, 2004 | Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScrip... |
| CVE-2004-1139 | — | — | 2.4% | Dec 15, 2004 | Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial... |
| CVE-2004-1322 | — | — | 2.5% | Dec 15, 2004 | Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, ... |
| CVE-2004-1335 | — | — | 1.0% | Dec 15, 2004 | Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of ser... |
| CVE-2004-1059 | — | — | 1.2% | Dec 10, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject a... |
| CVE-2004-1351 | — | — | 6.0% | Dec 7, 2004 | Unknown vulnerability in the rwho daemon (in.rwhod) for Solaris 7 through 9 allows remote attackers to execute arbitrary... |
| CVE-2004-0622 | — | — | 0.4% | Dec 6, 2004 | Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow... |
| CVE-2004-0627 | — | — | 69.6% | Dec 6, 2004 | The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication v... |
| CVE-2004-0628 | — | — | 7.8% | Dec 6, 2004 | Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (... |
| CVE-2004-0604 | — | — | 1.8% | Dec 6, 2004 | The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (cra... |
| CVE-2004-0603 | — | — | 3.1% | Dec 6, 2004 | gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the p... |
| CVE-2004-0577 | — | — | 1.4% | Dec 6, 2004 | WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbi... |
| CVE-2004-0633 | — | — | 18.0% | Dec 6, 2004 | The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abor... |
| CVE-2004-0634 | — | — | 5.3% | Dec 6, 2004 | The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (proce... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now