2004 CVE Vulnerabilities
2,707 CVEs published in 2004.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2004-0386 | — | — | 27.0% | May 4, 2004 | Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute ar... |
| CVE-2004-0366 | — | — | 1.5% | May 4, 2004 | SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statement... |
| CVE-2004-0367 | — | — | 5.3% | May 4, 2004 | Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation pr... |
| CVE-2004-0368 | — | — | 10.6% | May 4, 2004 | Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to ex... |
| CVE-2004-0370 | — | — | 0.4% | May 4, 2004 | The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IP... |
| CVE-2004-0371 | — | — | 1.5% | May 4, 2004 | Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm r... |
| CVE-2004-0374 | — | — | 2.8% | May 4, 2004 | Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensi... |
| CVE-2004-0376 | — | — | 1.8% | May 4, 2004 | oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command with a large val... |
| CVE-2004-0377 | — | — | 6.9% | May 4, 2004 | Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allow... |
| CVE-2004-0379 | — | — | 8.1% | May 4, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to... |
| CVE-2004-0380 | — | — | 63.2% | May 4, 2004 | The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to... |
| CVE-2004-0428 | — | — | 1.5% | May 3, 2004 | Unknown vulnerability in CoreFoundation in Mac OS X 10.3.3 and Mac OS X 10.3.3 Server, related to "the handling of an en... |
| CVE-2004-1991 | — | — | 2.9% | May 3, 2004 | Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a ... |
| CVE-2004-1982 | — | — | 1.5% | May 3, 2004 | Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return cha... |
| CVE-2004-1984 | — | — | 2.6% | May 2, 2004 | Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP ... |
| CVE-2004-1981 | — | — | 1.6% | May 2, 2004 | The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeated... |
| CVE-2004-1983 | — | — | 0.9% | May 2, 2004 | The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomi... |
| CVE-2004-2043 | — | — | 11.9% | May 1, 2004 | Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that us... |
| CVE-2004-1987 | — | — | 10.2% | Apr 30, 2004 | picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privil... |
| CVE-2004-1988 | — | — | 9.3% | Apr 30, 2004 | PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to... |
| CVE-2004-1989 | — | — | 9.3% | Apr 30, 2004 | PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execu... |
| CVE-2004-1985 | — | — | 3.9% | Apr 30, 2004 | Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to i... |
| CVE-2004-1978 | — | — | 2.0% | Apr 30, 2004 | Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HT... |
| CVE-2004-1979 | — | — | 1.2% | Apr 30, 2004 | Cross-site scripting (XSS) vulnerability in do_search.php in PROPS 0.6.1 allows remote attackers to inject arbitrary HTM... |
| CVE-2004-1980 | — | — | 1.7% | Apr 30, 2004 | Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a .... |
Check if your code is affected by 2004 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now