2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-1634 | — | — | 1.2% | Oct 25, 2004 | show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a b... |
| CVE-2004-1633 | — | — | 1.2% | Oct 25, 2004 | process_bug.cgi in Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS does not check edit permissions on the keywords field,... |
| CVE-2004-1630 | — | — | 1.3% | Oct 25, 2004 | Cross-site scripting (XSS) vulnerability in the login form in Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attacke... |
| CVE-2004-1631 | — | — | 1.4% | Oct 25, 2004 | Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the tar... |
| CVE-2004-1635 | — | — | 1.4% | Oct 24, 2004 | Bugzilla 2.17.1 through 2.18rc2 and 2.19 from cvs, when using the insidergroup feature, does not sufficiently protect pr... |
| CVE-2004-1628 | — | — | 4.7% | Oct 23, 2004 | Format string vulnerability in log.c in rssh before 2.2.2 allows remote authenticated users to execute arbitrary code. |
| CVE-2004-1629 | — | — | 1.2% | Oct 23, 2004 | Multiple SQL injection vulnerabilities in Dwc_articles 1.6 and earlier allow remote attackers to execute arbitrary SQL s... |
| CVE-2004-1623 | — | — | 18.6% | Oct 22, 2004 | The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in E... |
| CVE-2004-1625 | — | — | 1.6% | Oct 22, 2004 | pGina 1.7.6 and possibly older versions, when the Restart or Shutdown options are enabled on the login screen, allows re... |
| CVE-2004-1627 | — | — | 14.5% | Oct 22, 2004 | Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote attackers to execute arbi... |
| CVE-2004-1626 | — | — | 67.4% | Oct 22, 2004 | Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code v... |
| CVE-2004-1624 | — | — | 0.3% | Oct 21, 2004 | Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, wh... |
| CVE-2004-1620 | — | — | 8.1% | Oct 21, 2004 | CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting att... |
| CVE-2004-1622 | — | — | 2.4% | Oct 21, 2004 | SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statem... |
| CVE-2004-0051 | — | — | 2.4% | Oct 20, 2004 | Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME ... |
| CVE-2004-0747 | HIGH | 7.8 | 1.6% | Oct 20, 2004 | Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that caus... |
| CVE-2004-0799 | — | — | 6.2% | Oct 20, 2004 | The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (se... |
| CVE-2004-1381 | — | — | 6.9% | Oct 20, 2004 | Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the acti... |
| CVE-2004-0559 | — | — | 0.4% | Oct 20, 2004 | The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a ... |
| CVE-2004-0772 | CRITICAL | 9.8 | 7.0% | Oct 20, 2004 | Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remo... |
| CVE-2004-0798 | — | — | 62.6% | Oct 20, 2004 | Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to ... |
| CVE-2004-0797 | — | — | 0.5% | Oct 20, 2004 | The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local users... |
| CVE-2004-0796 | — | — | 1.9% | Oct 20, 2004 | SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed mess... |
| CVE-2004-0795 | — | — | 2.2% | Oct 20, 2004 | DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allow... |
| CVE-2004-0794 | — | — | 2.4% | Oct 20, 2004 | Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers t... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now