2004 CVE Vulnerabilities

2,707 CVEs published in 2004.

CVE IDSeverityCVSSDescription
CVE-2004-1715——Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arb...
CVE-2004-1347——X Display Manager (XDM) on Solaris 8 allows remote attackers to cause a denial of service (XDM crash) via an invalid X D...
CVE-2004-1713——Unknown vulnerability in HP Process Resource Manager (PRM) C.02.01[.01] and earlier, as used by HP-UX Workload Manager (...
CVE-2004-1701——Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote...
CVE-2004-1702——The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of...
CVE-2004-0579——Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root.
CVE-2004-0585——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0589. Reason: This candidate is a duplicate of...
CVE-2004-1712——Cross-site scripting (XSS) vulnerability in TypePad allows remote attackers to inject arbitrary Javascript via the name ...
CVE-2004-1711——Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary we...
CVE-2004-1710——page.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the url parameter.
CVE-2004-0683——Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a com...
CVE-2004-0682——comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to c...
CVE-2004-0681——Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffic...
CVE-2004-0680——Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, e...
CVE-2004-0679——The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP ...
CVE-2004-0678——Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to exec...
CVE-2004-0677——Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service (temporary hang)...
CVE-2004-0676——Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to c...
CVE-2004-0675——Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attac...
CVE-2004-0674——Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote a...
CVE-2004-0673——Cross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web...
CVE-2004-0672——Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMi...
CVE-2004-0671——Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying t...
CVE-2004-0670——Prestige 650HW-31 running Rompager 4.7 software allows remote attackers to cause a denial of service (device reboot) via...
CVE-2004-0669——Lotus Domino 6.5.0 and 6.5.1, with IMAP enabled, allows remote authenticated users to change their quota by using the IM...

Check if your code is affected by 2004 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now