# Vulnerabilities published in 2004


- [CVE-2004-2779](https://insights.sbomify.com/CVE-2004-2779/): Denial of service in n/a (high 7.5)
- [CVE-2004-2778](https://insights.sbomify.com/CVE-2004-2778/): Privilege escalation in n/a (high 7.1)
- [CVE-2004-2777](https://insights.sbomify.com/CVE-2004-2777/): Hardcoded credentials in n/a (critical 10.0)
- [CVE-2004-2776](https://insights.sbomify.com/CVE-2004-2776/): go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) query string or (2) artarchive parameter. (critical 9.8)
- [CVE-2004-2771](https://insights.sbomify.com/CVE-2004-2771/): Command injection in n/a (high 7.5)
- [CVE-2004-2769](https://insights.sbomify.com/CVE-2004-2769/): Information disclosure in n/a (medium 4.0)
- [CVE-2004-2768](https://insights.sbomify.com/CVE-2004-2768/): Privilege escalation in n/a (high 7.2)
- [CVE-2004-2767](https://insights.sbomify.com/CVE-2004-2767/): Denial of service in n/a (medium 4.3)
- [CVE-2004-2766](https://insights.sbomify.com/CVE-2004-2766/): Information disclosure in n/a (medium 4.3)
- [CVE-2004-2765](https://insights.sbomify.com/CVE-2004-2765/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2764](https://insights.sbomify.com/CVE-2004-2764/): Information disclosure in n/a (critical 10.0)
- [CVE-2004-2763](https://insights.sbomify.com/CVE-2004-2763/): Cross-site scripting in n/a (medium 5.8)
- [CVE-2004-2762](https://insights.sbomify.com/CVE-2004-2762/): Denial of service in n/a (medium 4.3)
- [CVE-2004-2761](https://insights.sbomify.com/CVE-2004-2761/): Weak cryptography in n/a (critical 9.8)
- [CVE-2004-2760](https://insights.sbomify.com/CVE-2004-2760/): Information disclosure in n/a (medium 6.8)
- [CVE-2004-2759](https://insights.sbomify.com/CVE-2004-2759/): Information disclosure in n/a (low 2.1)
- [CVE-2004-2758](https://insights.sbomify.com/CVE-2004-2758/): Denial of service in n/a (high 7.5)
- [CVE-2004-2757](https://insights.sbomify.com/CVE-2004-2757/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2756](https://insights.sbomify.com/CVE-2004-2756/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2755](https://insights.sbomify.com/CVE-2004-2755/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2754](https://insights.sbomify.com/CVE-2004-2754/): SQL injection in n/a (high 7.5)
- [CVE-2004-2753](https://insights.sbomify.com/CVE-2004-2753/): Information disclosure in n/a (medium 5.6)
- [CVE-2004-2752](https://insights.sbomify.com/CVE-2004-2752/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2751](https://insights.sbomify.com/CVE-2004-2751/): SQL injection in n/a (medium 6.8)
- [CVE-2004-2750](https://insights.sbomify.com/CVE-2004-2750/): Path traversal in n/a (medium 5.0)
- [CVE-2004-2749](https://insights.sbomify.com/CVE-2004-2749/): Path traversal in n/a (medium 4.3)
- [CVE-2004-2748](https://insights.sbomify.com/CVE-2004-2748/): Information disclosure in n/a (medium 4.3)
- [CVE-2004-2747](https://insights.sbomify.com/CVE-2004-2747/): Path traversal in n/a (medium 4.0)
- [CVE-2004-2746](https://insights.sbomify.com/CVE-2004-2746/): SQL injection in n/a (high 7.5)
- [CVE-2004-2745](https://insights.sbomify.com/CVE-2004-2745/): Path traversal in n/a (high 7.8)
- [CVE-2004-2744](https://insights.sbomify.com/CVE-2004-2744/): Unspecified vulnerability in Tincan Limited PHPlist before 2.8.12 has unknown impact and attack vectors, related to a "security update relea (medium 5.0)
- [CVE-2004-2743](https://insights.sbomify.com/CVE-2004-2743/): Path traversal in n/a (medium 6.4)
- [CVE-2004-2742](https://insights.sbomify.com/CVE-2004-2742/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2741](https://insights.sbomify.com/CVE-2004-2741/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2740](https://insights.sbomify.com/CVE-2004-2740/): Code injection in n/a (medium 4.3)
- [CVE-2004-2739](https://insights.sbomify.com/CVE-2004-2739/): Missing authorization in n/a (high 7.5)
- [CVE-2004-2738](https://insights.sbomify.com/CVE-2004-2738/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2737](https://insights.sbomify.com/CVE-2004-2737/): SQL injection in n/a (high 7.5)
- [CVE-2004-2736](https://insights.sbomify.com/CVE-2004-2736/): Auth bypass in n/a (medium 5.0)
- [CVE-2004-2735](https://insights.sbomify.com/CVE-2004-2735/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2734](https://insights.sbomify.com/CVE-2004-2734/): webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag fo (critical 10.0)
- [CVE-2004-2733](https://insights.sbomify.com/CVE-2004-2733/): Missing authorization in n/a (medium 5.8)
- [CVE-2004-2732](https://insights.sbomify.com/CVE-2004-2732/): nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which can be leveraged to de (medium 4.3)
- [CVE-2004-2731](https://insights.sbomify.com/CVE-2004-2731/): Integer overflow in n/a (medium 4.4)
- [CVE-2004-2730](https://insights.sbomify.com/CVE-2004-2730/): Privilege escalation in n/a (medium 4.6)
- [CVE-2004-2729](https://insights.sbomify.com/CVE-2004-2729/): Privilege escalation in n/a (medium 4.4)
- [CVE-2004-2728](https://insights.sbomify.com/CVE-2004-2728/): Memory corruption in n/a (low 3.5)
- [CVE-2004-2727](https://insights.sbomify.com/CVE-2004-2727/): Memory corruption in n/a (medium 4.3)
- [CVE-2004-2726](https://insights.sbomify.com/CVE-2004-2726/): Null dereference in n/a (medium 5.0)
- [CVE-2004-2725](https://insights.sbomify.com/CVE-2004-2725/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2724](https://insights.sbomify.com/CVE-2004-2724/): Denial of service in n/a (high 7.1)
- [CVE-2004-2723](https://insights.sbomify.com/CVE-2004-2723/): Information disclosure in n/a (low 2.1)
- [CVE-2004-2722](https://insights.sbomify.com/CVE-2004-2722/): Information disclosure in n/a (low 2.1)
- [CVE-2004-2721](https://insights.sbomify.com/CVE-2004-2721/): Weak cryptography in n/a (medium 4.3)
- [CVE-2004-2720](https://insights.sbomify.com/CVE-2004-2720/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2719](https://insights.sbomify.com/CVE-2004-2719/): Memory corruption in n/a (medium 6.8)
- [CVE-2004-2718](https://insights.sbomify.com/CVE-2004-2718/): Information disclosure in n/a (medium 4.3)
- [CVE-2004-2717](https://insights.sbomify.com/CVE-2004-2717/): Path traversal in n/a (low 2.6)
- [CVE-2004-2716](https://insights.sbomify.com/CVE-2004-2716/): SQL injection in n/a (high 7.5)
- [CVE-2004-2715](https://insights.sbomify.com/CVE-2004-2715/): Auth bypass in n/a (high 7.5)
- [CVE-2004-2714](https://insights.sbomify.com/CVE-2004-2714/): Other in n/a (medium 6.0)
- [CVE-2004-2713](https://insights.sbomify.com/CVE-2004-2713/): Misconfiguration in n/a (low 1.9)
- [CVE-2004-2712](https://insights.sbomify.com/CVE-2004-2712/): Memory corruption in n/a (medium 5.0)
- [CVE-2004-2711](https://insights.sbomify.com/CVE-2004-2711/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2710](https://insights.sbomify.com/CVE-2004-2710/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2709](https://insights.sbomify.com/CVE-2004-2709/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2708](https://insights.sbomify.com/CVE-2004-2708/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-2707](https://insights.sbomify.com/CVE-2004-2707/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2706](https://insights.sbomify.com/CVE-2004-2706/): Unspecified vulnerability in Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to cause a denial of service (crash) via conferen (medium 5.0)
- [CVE-2004-2705](https://insights.sbomify.com/CVE-2004-2705/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-2704](https://insights.sbomify.com/CVE-2004-2704/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2703](https://insights.sbomify.com/CVE-2004-2703/): Security feature bypass in n/a (medium 4.3)
- [CVE-2004-2702](https://insights.sbomify.com/CVE-2004-2702/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2701](https://insights.sbomify.com/CVE-2004-2701/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2700](https://insights.sbomify.com/CVE-2004-2700/): File upload in n/a (critical 9.0)
- [CVE-2004-2699](https://insights.sbomify.com/CVE-2004-2699/): Missing authorization in n/a (medium 4.3)
- [CVE-2004-2698](https://insights.sbomify.com/CVE-2004-2698/): Race condition in n/a (medium 6.9)
- [CVE-2004-2697](https://insights.sbomify.com/CVE-2004-2697/): Race condition in n/a (medium 6.9)
- [CVE-2004-2696](https://insights.sbomify.com/CVE-2004-2696/): Auth bypass in n/a (medium 5.5)
- [CVE-2004-2695](https://insights.sbomify.com/CVE-2004-2695/): SQL injection in n/a (high 7.5)
- [CVE-2004-2694](https://insights.sbomify.com/CVE-2004-2694/): Security feature bypass in n/a (medium 5.8)
- [CVE-2004-2693](https://insights.sbomify.com/CVE-2004-2693/): Privilege escalation in n/a (high 7.2)
- [CVE-2004-2692](https://insights.sbomify.com/CVE-2004-2692/): Command injection in n/a (critical 9.3)
- [CVE-2004-2691](https://insights.sbomify.com/CVE-2004-2691/): Denial of service in n/a (high 7.1)
- [CVE-2004-2690](https://insights.sbomify.com/CVE-2004-2690/): File upload in n/a (high 8.5)
- [CVE-2004-2689](https://insights.sbomify.com/CVE-2004-2689/): Auth bypass in n/a (critical 10.0)
- [CVE-2004-2688](https://insights.sbomify.com/CVE-2004-2688/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2687](https://insights.sbomify.com/CVE-2004-2687/): Missing authorization in n/a (critical 9.3)
- [CVE-2004-2686](https://insights.sbomify.com/CVE-2004-2686/): Path traversal in n/a (high 7.2)
- [CVE-2004-2685](https://insights.sbomify.com/CVE-2004-2685/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2684](https://insights.sbomify.com/CVE-2004-2684/): Path traversal in n/a (low 2.1)
- [CVE-2004-2683](https://insights.sbomify.com/CVE-2004-2683/): Path traversal in n/a (low 2.1)
- [CVE-2004-2682](https://insights.sbomify.com/CVE-2004-2682/): Information disclosure in n/a (medium 5.8)
- [CVE-2004-2681](https://insights.sbomify.com/CVE-2004-2681/): Security feature bypass in n/a (high 7.5)
- [CVE-2004-2680](https://insights.sbomify.com/CVE-2004-2680/): Use after free in n/a (medium 5.0)
- [CVE-2004-2679](https://insights.sbomify.com/CVE-2004-2679/): Information disclosure in n/a (high 7.8)
- [CVE-2004-2678](https://insights.sbomify.com/CVE-2004-2678/): Privilege escalation in n/a (medium 5.1)
- [CVE-2004-2677](https://insights.sbomify.com/CVE-2004-2677/): Code injection in n/a (high 7.5)
- [CVE-2004-2676](https://insights.sbomify.com/CVE-2004-2676/): Privilege escalation in n/a (high 7.2)
- [CVE-2004-2675](https://insights.sbomify.com/CVE-2004-2675/): Denial of service in n/a (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2004/