Skip to content

February 2004 · Band 4

Possible (1 to 10%)

10 CVEs

Each square is a CVE that EPSS puts between 1% and 10%.

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

  1. Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server…CVE-2004-0039Checkpoint · 9.3% likely

    Check Point

  2. Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.CVE-2004-0105Metamail Corporation · 8.2% likely

    Metamail Corporation

  3. KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled i…CVE-2004-0164Kame · 6.7% likely

    Kame

  4. mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.CVE-2003-0987Apache · 5.6% likely

    Apache

  5. Multiple vulnerabilities in Nokia 6310(i) Mobile phones allow remote attackers to cause a denial of service (reset) via malformed Bluetooth OBject EXchange (OBEX) messages, probab…CVE-2004-0143Nokia · 2.8% likely

    Nokia

  6. Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated u…CVE-2004-0132Visualshapers · 2.4% likely

    Visualshapers

  7. Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on t…CVE-2004-0127Phpgedview · 2.2% likely

    Phpgedview

  8. The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large numb…CVE-2004-0002Freebsd · 2.1% likely

    Freebsd

  9. login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or pa…CVE-2004-0130Phpgedview · 1.5% likely

    Phpgedview

  10. cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline (%0a) characters in parameters such as "required-subject," which can be used…CVE-2002-1575Mit · 1.4% likely

    Mit

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.