2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-1371 | — | — | 10.8% | Aug 4, 2004 | Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in t... |
| CVE-2004-1370 | — | — | 3.9% | Aug 4, 2004 | Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remo... |
| CVE-2004-1706 | — | — | 3.4% | Aug 2, 2004 | The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) an... |
| CVE-2004-1708 | — | — | 1.6% | Aug 2, 2004 | Webbsyte Chat 0.9.0 allows remote attackers to cause a denial of service (crash) via a large number of connections. |
| CVE-2004-1707 | — | — | 2.6% | Jul 30, 2004 | The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default pa... |
| CVE-2004-1705 | — | — | 4.9% | Jul 30, 2004 | Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username. |
| CVE-2004-1703 | HIGH | 8.8 | 2.0% | Jul 30, 2004 | Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that co... |
| CVE-2004-1704 | — | — | 1.5% | Jul 30, 2004 | WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the ... |
| CVE-2004-2064 | — | — | 1.9% | Jul 29, 2004 | Cross-site scripting (XSS) vulnerability in lostBook 1.1 and earlier allows remote attackers to inject arbitrary web scr... |
| CVE-2004-2067 | — | — | 2.8% | Jul 29, 2004 | SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attack... |
| CVE-2004-2066 | — | — | 1.4% | Jul 29, 2004 | SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and byp... |
| CVE-2004-0740 | — | — | 2.5% | Jul 27, 2004 | The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service (server c... |
| CVE-2004-0742 | — | — | 4.5% | Jul 27, 2004 | Sun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain Calendar Server privile... |
| CVE-2004-2061 | CRITICAL | 9.8 | 5.7% | Jul 27, 2004 | RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbi... |
| CVE-2004-0566 | — | — | 38.5% | Jul 27, 2004 | Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a... |
| CVE-2004-0594 | — | — | 54.9% | Jul 27, 2004 | The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when reg... |
| CVE-2004-0595 | — | — | 45.2% | Jul 27, 2004 | The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag ... |
| CVE-2004-0600 | — | — | 29.4% | Jul 27, 2004 | Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute a... |
| CVE-2004-0632 | — | — | 7.2% | Jul 27, 2004 | Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows r... |
| CVE-2004-0686 | — | — | 3.7% | Jul 27, 2004 | Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.... |
| CVE-2004-0695 | — | — | 38.2% | Jul 27, 2004 | Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbit... |
| CVE-2004-0696 | — | — | 1.4% | Jul 27, 2004 | The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a ... |
| CVE-2004-0697 | — | — | 1.4% | Jul 27, 2004 | Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and... |
| CVE-2004-0698 | — | — | 0.3% | Jul 27, 2004 | 4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack. |
| CVE-2004-0700 | — | — | 5.8% | Jul 27, 2004 | Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Ap... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now