2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-0765 | — | — | 1.0% | Aug 18, 2004 | The cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the ho... |
| CVE-2004-0766 | — | — | 1.0% | Aug 18, 2004 | NGSEC StackDefender 2.0 allows attackers to cause a denial of service (system crash) via an invalid address for the Base... |
| CVE-2004-0767 | — | — | 1.0% | Aug 18, 2004 | NGSEC StackDefender 1.10 allows attackers to cause a denial of service (system crash) via an invalid address for the Obj... |
| CVE-2004-0769 | — | — | 7.1% | Aug 18, 2004 | Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers fo... |
| CVE-2004-0519 | — | — | 22.5% | Aug 18, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary sc... |
| CVE-2004-0779 | — | — | 2.1% | Aug 18, 2004 | The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for ... |
| CVE-2004-0517 | — | — | 0.3% | Aug 18, 2004 | Unknown vulnerability in Mac OS X 10.3.4, related to "handling of process IDs during package installation," a different ... |
| CVE-2004-0226 | — | — | 3.9% | Aug 18, 2004 | Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or ex... |
| CVE-2004-0175 | — | — | 1.8% | Aug 18, 2004 | Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary... |
| CVE-2004-0134 | — | — | 0.3% | Aug 18, 2004 | cpr (libcpr) in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while re... |
| CVE-2004-0518 | — | — | 1.3% | Aug 18, 2004 | Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unkn... |
| CVE-2004-0502 | — | — | 20.2% | Aug 18, 2004 | Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img... |
| CVE-2004-0230 | — | — | 80.3% | Aug 18, 2004 | TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o... |
| CVE-2004-0076 | — | — | — | Aug 18, 2004 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was removed from considera... |
| CVE-2004-0412 | — | — | 3.0% | Aug 18, 2004 | Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server. |
| CVE-2004-1722 | — | — | 2.7% | Aug 17, 2004 | SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL... |
| CVE-2004-1721 | — | — | 2.4% | Aug 17, 2004 | The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrar... |
| CVE-2004-1720 | — | — | 7.9% | Aug 17, 2004 | The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sens... |
| CVE-2004-1719 | — | — | 5.0% | Aug 17, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbit... |
| CVE-2004-1718 | — | — | 0.4% | Aug 17, 2004 | The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a denial of ... |
| CVE-2004-1737 | — | — | 2.8% | Aug 16, 2004 | SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands ... |
| CVE-2004-1716 | — | — | 2.4% | Aug 16, 2004 | Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or... |
| CVE-2004-1717 | — | — | 5.4% | Aug 16, 2004 | Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary ... |
| CVE-2004-1682 | — | — | 2.5% | Aug 15, 2004 | Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via for... |
| CVE-2004-1714 | HIGH | 7.1 | 0.9% | Aug 11, 2004 | BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.i... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now