2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-0959 | — | — | 0.6% | Nov 3, 2004 | rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain ... |
| CVE-2004-0828 | — | — | 0.3% | Nov 3, 2004 | The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before execu... |
| CVE-2004-0832 | — | — | 10.7% | Nov 3, 2004 | The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled... |
| CVE-2004-0552 | — | — | 23.9% | Nov 3, 2004 | Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device na... |
| CVE-2004-0835 | — | — | 22.4% | Nov 3, 2004 | MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights o... |
| CVE-2004-0837 | — | — | 4.9% | Nov 3, 2004 | MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multi... |
| CVE-2004-0840 | — | — | 30.3% | Nov 3, 2004 | The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows ... |
| CVE-2004-0885 | — | — | 13.8% | Nov 3, 2004 | The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location c... |
| CVE-2004-0843 | — | — | 33.8% | Nov 3, 2004 | Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displaye... |
| CVE-2004-0844 | — | — | 32.8% | Nov 3, 2004 | Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter displayed address bars ... |
| CVE-2004-0845 | — | — | 31.0% | Nov 3, 2004 | Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain informat... |
| CVE-2004-0846 | — | — | 28.3% | Nov 3, 2004 | Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute ar... |
| CVE-2004-0910 | — | — | — | Nov 3, 2004 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0815. Reason: This candidate is a reservation ... |
| CVE-2004-0958 | — | — | 9.7% | Nov 3, 2004 | php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or ... |
| CVE-2004-0804 | — | — | 4.3% | Nov 3, 2004 | Vulnerability in tif_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via ... |
| CVE-2004-0216 | — | — | 48.7% | Nov 3, 2004 | Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to ex... |
| CVE-2004-0214 | — | — | 51.0% | Nov 3, 2004 | Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me ... |
| CVE-2004-0211 | — | — | 1.9% | Nov 3, 2004 | The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local us... |
| CVE-2004-0209 | — | — | 62.1% | Nov 3, 2004 | Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Serv... |
| CVE-2004-0208 | — | — | 1.5% | Nov 3, 2004 | The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 a... |
| CVE-2004-1121 | — | — | 4.4% | Nov 1, 2004 | Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags. |
| CVE-2004-1350 | — | — | 7.7% | Oct 30, 2004 | Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow ... |
| CVE-2004-1637 | — | — | 1.5% | Oct 26, 2004 | The Hawking Technologies HAR11A modem/router allows remote attackers to obtain sensitive information by connecting to po... |
| CVE-2004-1636 | — | — | 8.3% | Oct 26, 2004 | Heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote ... |
| CVE-2004-1639 | — | — | 1.7% | Oct 26, 2004 | Mozilla Firefox before 0.10, Mozilla 5.0, and Gecko 20040913 allows remote attackers to cause a denial of service (appli... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now