2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-0599 | — | — | 6.2% | Nov 23, 2004 | Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) pr... |
| CVE-2004-0598 | — | — | 6.1% | Nov 23, 2004 | The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (applicati... |
| CVE-2004-0597 | — | — | 82.5% | Nov 23, 2004 | Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute a... |
| CVE-2004-0331 | — | — | 15.8% | Nov 23, 2004 | Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (cra... |
| CVE-2004-0252 | — | — | 1.6% | Nov 23, 2004 | TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service (CPU consumption) via an empty USER name. |
| CVE-2004-0251 | — | — | 2.0% | Nov 23, 2004 | Cross-site scripting (XSS) vulnerability in rxgoogle.cgi allows remote attackers to execute arbitrary script as other us... |
| CVE-2004-0250 | — | — | 3.2% | Nov 23, 2004 | SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the ... |
| CVE-2004-0249 | — | — | 4.9% | Nov 23, 2004 | PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable t... |
| CVE-2004-0248 | — | — | 1.5% | Nov 23, 2004 | Cross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other user... |
| CVE-2004-0247 | — | — | 3.4% | Nov 23, 2004 | The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via exceptio... |
| CVE-2004-0112 | — | — | 10.4% | Nov 23, 2004 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly ... |
| CVE-2004-0333 | — | — | 24.2% | Nov 23, 2004 | Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, all... |
| CVE-2004-0263 | — | — | 3.5% | Nov 23, 2004 | PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled b... |
| CVE-2004-0334 | — | — | 1.7% | Nov 23, 2004 | InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_adminde... |
| CVE-2004-0335 | — | — | 1.4% | Nov 23, 2004 | LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a ... |
| CVE-2004-0336 | — | — | 1.5% | Nov 23, 2004 | LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains ... |
| CVE-2004-0337 | — | — | 2.0% | Nov 23, 2004 | Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary scrip... |
| CVE-2004-0338 | — | — | 2.4% | Nov 23, 2004 | SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL quer... |
| CVE-2004-0339 | — | — | 1.4% | Nov 23, 2004 | Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers... |
| CVE-2004-0340 | — | — | 1.3% | Nov 23, 2004 | Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Se... |
| CVE-2004-0341 | — | — | 0.4% | Nov 23, 2004 | WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local us... |
| CVE-2004-0343 | — | — | 1.8% | Nov 23, 2004 | Multiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL v... |
| CVE-2004-0344 | — | — | 2.2% | Nov 23, 2004 | Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete... |
| CVE-2004-0345 | — | — | 6.0% | Nov 23, 2004 | Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long server... |
| CVE-2004-0347 | — | — | 2.1% | Nov 23, 2004 | Cross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 (bu... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now