2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-0206 | — | — | 77.0% | Nov 3, 2004 | Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and ... |
| CVE-2004-0958 | — | — | 9.7% | Nov 3, 2004 | php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or ... |
| CVE-2004-0552 | — | — | 23.9% | Nov 3, 2004 | Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device na... |
| CVE-2004-0815 | — | — | 4.9% | Nov 3, 2004 | The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down ... |
| CVE-2004-0209 | — | — | 62.1% | Nov 3, 2004 | Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Serv... |
| CVE-2004-0569 | — | — | 19.4% | Nov 3, 2004 | The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of ... |
| CVE-2004-0885 | — | — | 13.8% | Nov 3, 2004 | The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location c... |
| CVE-2004-0214 | — | — | 51.0% | Nov 3, 2004 | Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me ... |
| CVE-2004-0216 | — | — | 48.7% | Nov 3, 2004 | Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to ex... |
| CVE-2004-0575 | — | — | 60.3% | Nov 3, 2004 | Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows S... |
| CVE-2004-0959 | — | — | 0.6% | Nov 3, 2004 | rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain ... |
| CVE-2004-0572 | — | — | 50.0% | Nov 3, 2004 | Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary cod... |
| CVE-2004-0774 | — | — | 1.9% | Nov 3, 2004 | RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of s... |
| CVE-2004-0208 | — | — | 1.5% | Nov 3, 2004 | The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 a... |
| CVE-2004-0828 | — | — | 0.3% | Nov 3, 2004 | The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before execu... |
| CVE-2004-0938 | — | — | 3.7% | Nov 3, 2004 | FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Se... |
| CVE-2004-0832 | — | — | 10.7% | Nov 3, 2004 | The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled... |
| CVE-2004-0804 | — | — | 4.3% | Nov 3, 2004 | Vulnerability in tif_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via ... |
| CVE-2004-0835 | — | — | 22.4% | Nov 3, 2004 | MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights o... |
| CVE-2004-0836 | — | — | 9.8% | Nov 3, 2004 | Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS... |
| CVE-2004-1121 | — | — | 4.4% | Nov 1, 2004 | Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags. |
| CVE-2004-1350 | — | — | 7.7% | Oct 30, 2004 | Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow ... |
| CVE-2004-1639 | — | — | 1.7% | Oct 26, 2004 | Mozilla Firefox before 0.10, Mozilla 5.0, and Gecko 20040913 allows remote attackers to cause a denial of service (appli... |
| CVE-2004-1636 | — | — | 8.3% | Oct 26, 2004 | Heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote ... |
| CVE-2004-1637 | — | — | 1.5% | Oct 26, 2004 | The Hawking Technologies HAR11A modem/router allows remote attackers to obtain sensitive information by connecting to po... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now