2004 CVE Vulnerabilities

2,707 CVEs published in 2004.

CVE IDSeverityCVSSDescription
CVE-2004-0318——Load Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the ...
CVE-2004-0277——Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly ...
CVE-2004-0276——The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial...
CVE-2004-0275——SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensi...
CVE-2004-0274——Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is n...
CVE-2004-0273——Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote at...
CVE-2004-0272——SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive info...
CVE-2004-0271——Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web scri...
CVE-2004-0270——libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail mes...
CVE-2004-0269——SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary S...
CVE-2004-0268——Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service (hang) via (1)...
CVE-2004-0266——SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote ...
CVE-2004-0743——Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method UR...
CVE-2004-0744——The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory a...
CVE-2004-0265——Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbitr...
CVE-2004-0771——Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long...
CVE-2004-0320——Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to access secr...
CVE-2004-0328——Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the ...
CVE-2004-0327——Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary ...
CVE-2004-0254——Cross-site scripting (XSS) vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary scrip...
CVE-2004-0255——Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long direc...
CVE-2004-0267——The (1) inoregupdate, (2) uniftest, or (3) unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to over...
CVE-2004-0256——GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on l...
CVE-2004-0257——OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 pack...
CVE-2004-0079HIGH7.5The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a...

Check if your code is affected by 2004 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now