2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-0526 | — | — | 17.2% | Aug 6, 2004 | Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via... |
| CVE-2004-0525 | — | — | 2.7% | Aug 6, 2004 | HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service ... |
| CVE-2004-0524 | — | — | 4.6% | Aug 6, 2004 | Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local us... |
| CVE-2004-0522 | — | — | 2.8% | Aug 6, 2004 | Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges. |
| CVE-2004-0665 | — | — | 2.9% | Aug 6, 2004 | csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveal... |
| CVE-2004-0495 | — | — | 0.4% | Aug 6, 2004 | Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memor... |
| CVE-2004-0493 | — | — | 84.8% | Aug 6, 2004 | The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memor... |
| CVE-2004-0492 | — | — | 33.6% | Aug 6, 2004 | Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a d... |
| CVE-2004-0215 | — | — | 15.6% | Aug 6, 2004 | Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-... |
| CVE-2004-0212 | — | — | 67.0% | Aug 6, 2004 | Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, al... |
| CVE-2004-0205 | — | — | 24.5% | Aug 6, 2004 | Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the ... |
| CVE-2004-0204 | — | — | 73.0% | Aug 6, 2004 | Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterpri... |
| CVE-2004-0202 | — | — | 26.2% | Aug 6, 2004 | IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2... |
| CVE-2004-0201 | — | — | 45.1% | Aug 6, 2004 | Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP,... |
| CVE-2004-0661 | — | — | 2.3% | Aug 6, 2004 | Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a ... |
| CVE-2004-0137 | — | — | 0.3% | Aug 6, 2004 | Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system pan... |
| CVE-2004-0136 | — | — | 0.4% | Aug 6, 2004 | The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system cra... |
| CVE-2004-0125 | — | — | 0.3% | Aug 6, 2004 | The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables ori... |
| CVE-2004-0660 | — | — | 3.9% | Aug 6, 2004 | Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in Cu... |
| CVE-2004-0659 | — | — | 15.7% | Aug 6, 2004 | Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code v... |
| CVE-2004-0461 | — | — | 16.8% | Aug 6, 2004 | The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnp... |
| CVE-2004-0460 | — | — | 45.3% | Aug 6, 2004 | Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote... |
| CVE-2004-0658 | — | — | 0.4% | Aug 6, 2004 | Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) d... |
| CVE-2004-0453 | — | — | 0.4% | Aug 6, 2004 | Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denia... |
| CVE-2004-0450 | — | — | 4.7% | Aug 6, 2004 | Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers t... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now