2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-2064 | — | — | 1.9% | Jul 29, 2004 | Cross-site scripting (XSS) vulnerability in lostBook 1.1 and earlier allows remote attackers to inject arbitrary web scr... |
| CVE-2004-2066 | — | — | 1.4% | Jul 29, 2004 | SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and byp... |
| CVE-2004-0734 | — | — | 3.6% | Jul 27, 2004 | Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter. |
| CVE-2004-0632 | — | — | 7.2% | Jul 27, 2004 | Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows r... |
| CVE-2004-0686 | — | — | 3.7% | Jul 27, 2004 | Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.... |
| CVE-2004-0695 | — | — | 38.2% | Jul 27, 2004 | Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbit... |
| CVE-2004-0696 | — | — | 1.4% | Jul 27, 2004 | The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a ... |
| CVE-2004-0697 | — | — | 1.4% | Jul 27, 2004 | Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and... |
| CVE-2004-0698 | — | — | 0.3% | Jul 27, 2004 | 4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack. |
| CVE-2004-0700 | — | — | 5.8% | Jul 27, 2004 | Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Ap... |
| CVE-2004-0701 | — | — | 0.3% | Jul 27, 2004 | Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when th... |
| CVE-2004-0702 | — | — | 1.2% | Jul 27, 2004 | DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not runn... |
| CVE-2004-0703 | — | — | 1.1% | Jul 27, 2004 | Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membersh... |
| CVE-2004-0704 | — | — | 1.5% | Jul 27, 2004 | Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, w... |
| CVE-2004-0705 | — | — | 1.4% | Jul 27, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cg... |
| CVE-2004-0706 | — | — | 0.3% | Jul 27, 2004 | Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password i... |
| CVE-2004-0707 | — | — | 1.0% | Jul 27, 2004 | SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote at... |
| CVE-2004-0708 | — | — | 1.8% | Jul 27, 2004 | MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existi... |
| CVE-2004-0709 | — | — | 3.3% | Jul 27, 2004 | HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which cou... |
| CVE-2004-0710 | — | — | 2.0% | Jul 27, 2004 | IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers ... |
| CVE-2004-0711 | — | — | 1.9% | Jul 27, 2004 | The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if th... |
| CVE-2004-0712 | — | — | 0.4% | Jul 27, 2004 | The configuration tools (1) config.sh in Unix or (2) config.cmd in Windows for BEA WebLogic Server 8.1 through SP2 creat... |
| CVE-2004-0713 | — | — | 3.2% | Jul 27, 2004 | The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 throug... |
| CVE-2004-0714 | — | — | 2.6% | Jul 27, 2004 | Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper ... |
| CVE-2004-0715 | — | — | 2.3% | Jul 27, 2004 | The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 do... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now