2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-0761 | — | — | 1.6% | Aug 18, 2004 | Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect seque... |
| CVE-2004-0412 | — | — | 3.0% | Aug 18, 2004 | Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server. |
| CVE-2004-0521 | — | — | 3.2% | Aug 18, 2004 | SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL stateme... |
| CVE-2004-0523 | — | — | 11.7% | Aug 18, 2004 | Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers ... |
| CVE-2004-0757 | — | — | 5.3% | Aug 18, 2004 | Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunde... |
| CVE-2004-0758 | — | — | 3.1% | Aug 18, 2004 | Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA... |
| CVE-2004-0759 | — | — | 1.8% | Aug 18, 2004 | Mozilla before 1.7 allows remote web servers to read arbitrary files via Javascript that sets the value of an <input typ... |
| CVE-2004-0760 | — | — | 8.8% | Aug 18, 2004 | Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null charact... |
| CVE-2004-0839 | — | — | 33.1% | Aug 18, 2004 | Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbit... |
| CVE-2004-0230 | — | — | 80.3% | Aug 18, 2004 | TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o... |
| CVE-2004-0076 | — | — | — | Aug 18, 2004 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was removed from considera... |
| CVE-2004-1718 | — | — | 0.4% | Aug 17, 2004 | The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a denial of ... |
| CVE-2004-1721 | — | — | 2.4% | Aug 17, 2004 | The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrar... |
| CVE-2004-1720 | — | — | 7.9% | Aug 17, 2004 | The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sens... |
| CVE-2004-1719 | — | — | 5.0% | Aug 17, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbit... |
| CVE-2004-1722 | — | — | 2.7% | Aug 17, 2004 | SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL... |
| CVE-2004-1717 | — | — | 5.4% | Aug 16, 2004 | Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary ... |
| CVE-2004-1716 | — | — | 2.4% | Aug 16, 2004 | Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or... |
| CVE-2004-1737 | — | — | 2.8% | Aug 16, 2004 | SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands ... |
| CVE-2004-1682 | — | — | 2.5% | Aug 15, 2004 | Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via for... |
| CVE-2004-1715 | — | — | 2.0% | Aug 11, 2004 | Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arb... |
| CVE-2004-1713 | — | — | 0.5% | Aug 10, 2004 | Unknown vulnerability in HP Process Resource Manager (PRM) C.02.01[.01] and earlier, as used by HP-UX Workload Manager (... |
| CVE-2004-1347 | — | — | 3.5% | Aug 10, 2004 | X Display Manager (XDM) on Solaris 8 allows remote attackers to cause a denial of service (XDM crash) via an invalid X D... |
| CVE-2004-1702 | — | — | 2.4% | Aug 9, 2004 | The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of... |
| CVE-2004-1701 | — | — | 19.5% | Aug 9, 2004 | Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now