2004 CVE Vulnerabilities

2,707 CVEs published in 2004.

CVE IDSeverityCVSSDescription
CVE-2004-0793——The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, wh...
CVE-2004-0792——Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is di...
CVE-2004-0788——Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attacke...
CVE-2004-0787——Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, a...
CVE-2004-0785——Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute a...
CVE-2004-0784——The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metac...
CVE-2004-0783——Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, ...
CVE-2004-0782——Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gd...
CVE-2004-0781——Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast-server) 1.3.12 and earl...
CVE-2004-0778——CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary fil...
CVE-2004-0777——Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when l...
CVE-2004-0775——Buffer overflow in WIDCOMM Bluetooth Connectivity Software, as used in products such as BTStackServer 1.3.2.7 and 1.4.2....
CVE-2004-0768——libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execu...
CVE-2004-0755——The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permiss...
CVE-2004-0754——Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary...
CVE-2004-0753——The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a deni...
CVE-2004-0752——OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow loc...
CVE-2004-0751——The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows...
CVE-2004-0750——Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorr...
CVE-2004-0748——mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting ...
CVE-2004-0746——Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd....
CVE-2004-0162——Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME ...
CVE-2004-1380——Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow re...
CVE-2004-0161——Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME ...
CVE-2004-0053——Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME ...

Check if your code is affected by 2004 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now