2004 CVE Vulnerabilities

2,707 CVEs published in 2004.

CVE IDSeverityCVSSDescription
CVE-2004-0487——A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resour...
CVE-2004-0839——Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbit...
CVE-2004-0722——Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and po...
CVE-2004-0523——Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers ...
CVE-2004-0763——Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Jav...
CVE-2004-0630——The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including...
CVE-2004-0520——Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arb...
CVE-2004-0504——Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip ser...
CVE-2004-0503——Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media f...
CVE-2004-0516——Unknown vulnerability in Mac OS X 10.3.4, related to "package installation scripts," a different vulnerability than CVE-...
CVE-2004-0425——Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a lar...
CVE-2004-0235——Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files...
CVE-2004-0234——Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as B...
CVE-2004-0233——Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwr...
CVE-2004-0232——Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of ...
CVE-2004-0231——Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary fi...
CVE-2004-0229——The framebuffer driver in Linux kernel 2.6.x does not properly use the fb_copy_cmap function, with unknown impact.
CVE-2004-0228——Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain pr...
CVE-2004-0757——Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunde...
CVE-2004-0758——Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA...
CVE-2004-0759——Mozilla before 1.7 allows remote web servers to read arbitrary files via Javascript that sets the value of an <input typ...
CVE-2004-0760——Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null charact...
CVE-2004-0761——Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect seque...
CVE-2004-0762——Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensio...
CVE-2004-0764——Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface ...

Check if your code is affected by 2004 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now