2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-0285 | CRITICAL | 9.8 | 7.8% | Nov 23, 2004 | PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyG... |
| CVE-2004-0332 | — | — | 2.5% | Nov 23, 2004 | Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote a... |
| CVE-2004-0342 | MEDIUM | 5.5 | 0.4% | Nov 23, 2004 | WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service ... |
| CVE-2004-0361 | — | — | 7.0% | Nov 23, 2004 | The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault... |
| CVE-2004-0494 | — | — | 1.6% | Nov 23, 2004 | Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform ce... |
| CVE-2004-0259 | — | — | 2.1% | Nov 23, 2004 | The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via a... |
| CVE-2004-0349 | — | — | 3.2% | Nov 23, 2004 | Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot ... |
| CVE-2004-0350 | — | — | 0.5% | Nov 23, 2004 | SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local user... |
| CVE-2004-0351 | — | — | 0.5% | Nov 23, 2004 | Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local u... |
| CVE-2004-1331 | — | — | 19.5% | Nov 16, 2004 | The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Sec... |
| CVE-2004-1315 | — | — | 71.9% | Nov 12, 2004 | viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrase... |
| CVE-2004-0910 | — | — | — | Nov 3, 2004 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0815. Reason: This candidate is a reservation ... |
| CVE-2004-0214 | — | — | 51.0% | Nov 3, 2004 | Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me ... |
| CVE-2004-0211 | — | — | 1.9% | Nov 3, 2004 | The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local us... |
| CVE-2004-0209 | — | — | 62.1% | Nov 3, 2004 | Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Serv... |
| CVE-2004-0208 | — | — | 1.5% | Nov 3, 2004 | The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 a... |
| CVE-2004-0207 | — | — | 1.8% | Nov 3, 2004 | "Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98,... |
| CVE-2004-0206 | — | — | 77.0% | Nov 3, 2004 | Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and ... |
| CVE-2004-0216 | — | — | 48.7% | Nov 3, 2004 | Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to ex... |
| CVE-2004-0552 | — | — | 23.9% | Nov 3, 2004 | Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device na... |
| CVE-2004-0815 | — | — | 4.9% | Nov 3, 2004 | The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down ... |
| CVE-2004-0958 | — | — | 9.7% | Nov 3, 2004 | php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or ... |
| CVE-2004-0959 | — | — | 0.6% | Nov 3, 2004 | rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain ... |
| CVE-2004-0938 | — | — | 3.7% | Nov 3, 2004 | FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Se... |
| CVE-2004-0920 | — | — | 1.9% | Nov 3, 2004 | Symantec Norton AntiVirus 2004, and earlier versions, allows a virus or other malicious code to avoid detection or cause... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now