# Vulnerabilities published in 2004 - [CVE-2004-2574](https://insights.sbomify.com/CVE-2004-2574/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2573](https://insights.sbomify.com/CVE-2004-2573/): Code injection in n/a (high 7.5) - [CVE-2004-2572](https://insights.sbomify.com/CVE-2004-2572/): Information disclosure in n/a (medium 5.0) - [CVE-2004-2571](https://insights.sbomify.com/CVE-2004-2571/): Memory corruption in n/a (high 7.5) - [CVE-2004-2570](https://insights.sbomify.com/CVE-2004-2570/): Cross-site scripting in n/a (medium 5.0) - [CVE-2004-2569](https://insights.sbomify.com/CVE-2004-2569/): Path traversal in n/a (low 2.1) - [CVE-2004-2568](https://insights.sbomify.com/CVE-2004-2568/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2567](https://insights.sbomify.com/CVE-2004-2567/): SQL injection in n/a (high 7.5) - [CVE-2004-2566](https://insights.sbomify.com/CVE-2004-2566/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2565](https://insights.sbomify.com/CVE-2004-2565/): Path traversal in n/a (medium 5.0) - [CVE-2004-2564](https://insights.sbomify.com/CVE-2004-2564/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2563](https://insights.sbomify.com/CVE-2004-2563/): Cross-site scripting in n/a (medium 5.8) - [CVE-2004-2562](https://insights.sbomify.com/CVE-2004-2562/): SQL injection in n/a (high 7.5) - [CVE-2004-2561](https://insights.sbomify.com/CVE-2004-2561/): SQL injection in n/a (high 7.5) - [CVE-2004-2560](https://insights.sbomify.com/CVE-2004-2560/): File upload in n/a (high 7.5) - [CVE-2004-2559](https://insights.sbomify.com/CVE-2004-2559/): Missing authorization in n/a (high 7.5) - [CVE-2004-2558](https://insights.sbomify.com/CVE-2004-2558/): Auth bypass in n/a (high 7.5) - [CVE-2004-2557](https://insights.sbomify.com/CVE-2004-2557/): Hardcoded credentials in n/a (medium 5.0) - [CVE-2004-2556](https://insights.sbomify.com/CVE-2004-2556/): Hardcoded credentials in n/a (medium 5.0) - [CVE-2004-2555](https://insights.sbomify.com/CVE-2004-2555/): Weak cryptography in n/a (low 2.1) - [CVE-2004-2554](https://insights.sbomify.com/CVE-2004-2554/): Privilege escalation in n/a (high 7.2) - [CVE-2004-2553](https://insights.sbomify.com/CVE-2004-2553/): Privilege escalation in n/a (medium 6.0) - [CVE-2004-2552](https://insights.sbomify.com/CVE-2004-2552/): Memory corruption in n/a (medium 4.6) - [CVE-2004-2551](https://insights.sbomify.com/CVE-2004-2551/): SQL injection in n/a (high 7.5) - [CVE-2004-2550](https://insights.sbomify.com/CVE-2004-2550/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2549](https://insights.sbomify.com/CVE-2004-2549/): Denial of service in n/a (medium 5.0) - [CVE-2004-2548](https://insights.sbomify.com/CVE-2004-2548/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2547](https://insights.sbomify.com/CVE-2004-2547/): Information disclosure in n/a (low 2.6) - [CVE-2004-2546](https://insights.sbomify.com/CVE-2004-2546/): Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory consumption). (medium 6.4) - [CVE-2004-2545](https://insights.sbomify.com/CVE-2004-2545/): Denial of service in n/a (medium 5.0) - [CVE-2004-2544](https://insights.sbomify.com/CVE-2004-2544/): Information disclosure in n/a (low 2.1) - [CVE-2004-2543](https://insights.sbomify.com/CVE-2004-2543/): Denial of service in n/a (medium 5.0) - [CVE-2004-2542](https://insights.sbomify.com/CVE-2004-2542/): SQL injection in n/a (high 7.5) - [CVE-2004-2541](https://insights.sbomify.com/CVE-2004-2541/): Memory corruption in n/a (medium 6.9) - [CVE-2004-2540](https://insights.sbomify.com/CVE-2004-2540/): Denial of service in n/a (medium 5.0) - [CVE-2004-2539](https://insights.sbomify.com/CVE-2004-2539/): Denial of service in n/a (high 7.8) - [CVE-2004-2538](https://insights.sbomify.com/CVE-2004-2538/): Code injection in n/a (medium 6.5) - [CVE-2004-2537](https://insights.sbomify.com/CVE-2004-2537/): Other in n/a (critical 10.0) - [CVE-2004-2536](https://insights.sbomify.com/CVE-2004-2536/): Privilege escalation in n/a (high 7.5) - [CVE-2004-2535](https://insights.sbomify.com/CVE-2004-2535/): Missing authorization in n/a (medium 5.0) - [CVE-2004-2534](https://insights.sbomify.com/CVE-2004-2534/): Denial of service in n/a (high 7.8) - [CVE-2004-2533](https://insights.sbomify.com/CVE-2004-2533/): Denial of service in n/a (medium 5.0) - [CVE-2004-2532](https://insights.sbomify.com/CVE-2004-2532/): Hardcoded credentials in n/a (critical 10.0) - [CVE-2004-2531](https://insights.sbomify.com/CVE-2004-2531/): Denial of service in n/a (high 7.8) - [CVE-2004-2530](https://insights.sbomify.com/CVE-2004-2530/): Other in n/a (low 2.6) - [CVE-2004-2529](https://insights.sbomify.com/CVE-2004-2529/): Security feature bypass in n/a (medium 5.0) - [CVE-2004-2528](https://insights.sbomify.com/CVE-2004-2528/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2527](https://insights.sbomify.com/CVE-2004-2527/): Denial of service in n/a (medium 5.4) - [CVE-2004-2526](https://insights.sbomify.com/CVE-2004-2526/): Path traversal in n/a (medium 5.0) - [CVE-2004-2525](https://insights.sbomify.com/CVE-2004-2525/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2524](https://insights.sbomify.com/CVE-2004-2524/): Information disclosure in n/a (medium 5.0) - [CVE-2004-2523](https://insights.sbomify.com/CVE-2004-2523/): Memory corruption in n/a (medium 6.5) - [CVE-2004-2522](https://insights.sbomify.com/CVE-2004-2522/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2521](https://insights.sbomify.com/CVE-2004-2521/): Denial of service in n/a (medium 5.0) - [CVE-2004-2520](https://insights.sbomify.com/CVE-2004-2520/): Denial of service in n/a (medium 4.0) - [CVE-2004-2519](https://insights.sbomify.com/CVE-2004-2519/): Denial of service in n/a (medium 5.0) - [CVE-2004-2518](https://insights.sbomify.com/CVE-2004-2518/): Information disclosure in n/a (medium 5.0) - [CVE-2004-2517](https://insights.sbomify.com/CVE-2004-2517/): Denial of service in n/a (medium 5.0) - [CVE-2004-2516](https://insights.sbomify.com/CVE-2004-2516/): Path traversal in n/a (medium 5.0) - [CVE-2004-2515](https://insights.sbomify.com/CVE-2004-2515/): Memory corruption in n/a (high 7.2) - [CVE-2004-2514](https://insights.sbomify.com/CVE-2004-2514/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2513](https://insights.sbomify.com/CVE-2004-2513/): Memory corruption in n/a (critical 10.0) - [CVE-2004-2512](https://insights.sbomify.com/CVE-2004-2512/): Other in n/a (medium 4.3) - [CVE-2004-2511](https://insights.sbomify.com/CVE-2004-2511/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2510](https://insights.sbomify.com/CVE-2004-2510/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2509](https://insights.sbomify.com/CVE-2004-2509/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2508](https://insights.sbomify.com/CVE-2004-2508/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2507](https://insights.sbomify.com/CVE-2004-2507/): Path traversal in n/a (medium 5.0) - [CVE-2004-2506](https://insights.sbomify.com/CVE-2004-2506/): Information disclosure in n/a (medium 5.0) - [CVE-2004-2505](https://insights.sbomify.com/CVE-2004-2505/): Denial of service in n/a (medium 5.0) - [CVE-2004-2504](https://insights.sbomify.com/CVE-2004-2504/): Privilege escalation in n/a (high 7.2) - [CVE-2004-2503](https://insights.sbomify.com/CVE-2004-2503/): Denial of service in n/a (medium 5.0) - [CVE-2004-2502](https://insights.sbomify.com/CVE-2004-2502/): Path traversal in n/a (low 2.1) - [CVE-2004-2501](https://insights.sbomify.com/CVE-2004-2501/): Memory corruption in n/a (high 7.5) - [CVE-2004-2500](https://insights.sbomify.com/CVE-2004-2500/): Unknown vulnerability in IlohaMail before 0.8.14-rc1 has unknown impact and attack vectors. (critical 10.0) - [CVE-2004-2499](https://insights.sbomify.com/CVE-2004-2499/): Denial of service in n/a (high 7.8) - [CVE-2004-2498](https://insights.sbomify.com/CVE-2004-2498/): Information disclosure in n/a (medium 5.0) - [CVE-2004-2497](https://insights.sbomify.com/CVE-2004-2497/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2496](https://insights.sbomify.com/CVE-2004-2496/): Denial of service in n/a (high 7.8) - [CVE-2004-2495](https://insights.sbomify.com/CVE-2004-2495/): Denial of service in n/a (high 7.8) - [CVE-2004-2494](https://insights.sbomify.com/CVE-2004-2494/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2493](https://insights.sbomify.com/CVE-2004-2493/): Path traversal in n/a (medium 4.0) - [CVE-2004-2492](https://insights.sbomify.com/CVE-2004-2492/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2491](https://insights.sbomify.com/CVE-2004-2491/): Other in n/a (low 2.6) - [CVE-2004-2490](https://insights.sbomify.com/CVE-2004-2490/): Memory corruption in n/a (medium 4.6) - [CVE-2004-2489](https://insights.sbomify.com/CVE-2004-2489/): Code injection in n/a (medium 4.6) - [CVE-2004-2488](https://insights.sbomify.com/CVE-2004-2488/): Path traversal in n/a (medium 4.0) - [CVE-2004-2487](https://insights.sbomify.com/CVE-2004-2487/): Path traversal in n/a (medium 4.0) - [CVE-2004-2486](https://insights.sbomify.com/CVE-2004-2486/): Use after free in n/a (high 7.5) - [CVE-2004-2485](https://insights.sbomify.com/CVE-2004-2485/): Path traversal in n/a (medium 5.0) - [CVE-2004-2484](https://insights.sbomify.com/CVE-2004-2484/): Cross-site scripting in n/a (medium 4.3) - [CVE-2004-2483](https://insights.sbomify.com/CVE-2004-2483/): Other in n/a (medium 6.4) - [CVE-2004-2482](https://insights.sbomify.com/CVE-2004-2482/): Code injection in n/a (medium 5.0) - [CVE-2004-2481](https://insights.sbomify.com/CVE-2004-2481/): Server-side request forgery in n/a (medium 4.6) - [CVE-2004-2480](https://insights.sbomify.com/CVE-2004-2480/): Security feature bypass in n/a (medium 5.0) - [CVE-2004-2479](https://insights.sbomify.com/CVE-2004-2479/): Information disclosure in n/a (medium 5.0) - [CVE-2004-2478](https://insights.sbomify.com/CVE-2004-2478/): Path traversal in n/a (high 7.5) - [CVE-2004-2477](https://insights.sbomify.com/CVE-2004-2477/): Security feature bypass in n/a (low 2.1) - [CVE-2004-2476](https://insights.sbomify.com/CVE-2004-2476/): Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite loop and crash) via an IFRAME with "?" as the file source. (low 2.6) - [CVE-2004-2475](https://insights.sbomify.com/CVE-2004-2475/): Cross-site scripting in n/a (medium 4.3) --- From sbomify Insights: https://insights.sbomify.com/years/2004/page/3/