2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-0359 | — | — | 5.6% | Nov 23, 2004 | Cross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to exec... |
| CVE-2004-0360 | — | — | 1.0% | Nov 23, 2004 | Unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vecto... |
| CVE-2004-0361 | — | — | 7.0% | Nov 23, 2004 | The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault... |
| CVE-2004-0415 | — | — | 0.8% | Nov 23, 2004 | Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portio... |
| CVE-2004-0744 | — | — | 1.6% | Nov 23, 2004 | The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory a... |
| CVE-2004-0743 | — | — | 2.0% | Nov 23, 2004 | Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method UR... |
| CVE-2004-0112 | — | — | 10.4% | Nov 23, 2004 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly ... |
| CVE-2004-0494 | — | — | 1.6% | Nov 23, 2004 | Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform ce... |
| CVE-2004-0597 | — | — | 82.5% | Nov 23, 2004 | Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute a... |
| CVE-2004-0598 | — | — | 6.1% | Nov 23, 2004 | The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (applicati... |
| CVE-2004-0599 | — | — | 6.2% | Nov 23, 2004 | Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) pr... |
| CVE-2004-1331 | — | — | 19.5% | Nov 16, 2004 | The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Sec... |
| CVE-2004-1315 | — | — | 71.9% | Nov 12, 2004 | viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrase... |
| CVE-2004-0938 | — | — | 3.7% | Nov 3, 2004 | FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Se... |
| CVE-2004-0774 | — | — | 1.9% | Nov 3, 2004 | RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of s... |
| CVE-2004-0836 | — | — | 9.8% | Nov 3, 2004 | Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS... |
| CVE-2004-0815 | — | — | 4.9% | Nov 3, 2004 | The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down ... |
| CVE-2004-0207 | — | — | 1.8% | Nov 3, 2004 | "Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98,... |
| CVE-2004-0920 | — | — | 1.9% | Nov 3, 2004 | Symantec Norton AntiVirus 2004, and earlier versions, allows a virus or other malicious code to avoid detection or cause... |
| CVE-2004-0569 | — | — | 19.4% | Nov 3, 2004 | The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of ... |
| CVE-2004-0572 | — | — | 50.0% | Nov 3, 2004 | Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary cod... |
| CVE-2004-0206 | — | — | 77.0% | Nov 3, 2004 | Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and ... |
| CVE-2004-0574 | — | — | 67.8% | Nov 3, 2004 | The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Ser... |
| CVE-2004-0575 | — | — | 60.3% | Nov 3, 2004 | Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows S... |
| CVE-2004-0911 | — | — | 2.6% | Nov 3, 2004 | telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now