# Vulnerabilities published in 2004


- [CVE-2004-2474](https://insights.sbomify.com/CVE-2004-2474/): SQL injection in n/a (high 7.5)
- [CVE-2004-2473](https://insights.sbomify.com/CVE-2004-2473/): Path traversal in n/a (low 1.2)
- [CVE-2004-2472](https://insights.sbomify.com/CVE-2004-2472/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2471](https://insights.sbomify.com/CVE-2004-2471/): SQL injection in n/a (high 7.5)
- [CVE-2004-2470](https://insights.sbomify.com/CVE-2004-2470/): Other in n/a (critical 10.0)
- [CVE-2004-2469](https://insights.sbomify.com/CVE-2004-2469/): Missing authorization in n/a (medium 5.0)
- [CVE-2004-2468](https://insights.sbomify.com/CVE-2004-2468/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2467](https://insights.sbomify.com/CVE-2004-2467/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2466](https://insights.sbomify.com/CVE-2004-2466/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2465](https://insights.sbomify.com/CVE-2004-2465/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2464](https://insights.sbomify.com/CVE-2004-2464/): Path traversal in n/a (medium 5.0)
- [CVE-2004-2463](https://insights.sbomify.com/CVE-2004-2463/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2462](https://insights.sbomify.com/CVE-2004-2462/): Path traversal in n/a (medium 4.6)
- [CVE-2004-2461](https://insights.sbomify.com/CVE-2004-2461/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2460](https://insights.sbomify.com/CVE-2004-2460/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2459](https://insights.sbomify.com/CVE-2004-2459/): Information disclosure in n/a (low 2.1)
- [CVE-2004-2458](https://insights.sbomify.com/CVE-2004-2458/): Path traversal in n/a (medium 5.0)
- [CVE-2004-2457](https://insights.sbomify.com/CVE-2004-2457/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2456](https://insights.sbomify.com/CVE-2004-2456/): SQL injection in n/a (high 7.5)
- [CVE-2004-2455](https://insights.sbomify.com/CVE-2004-2455/): Information disclosure in n/a (high 7.5)
- [CVE-2004-2454](https://insights.sbomify.com/CVE-2004-2454/): Information disclosure in n/a (low 2.1)
- [CVE-2004-2453](https://insights.sbomify.com/CVE-2004-2453/): Other in n/a (critical 10.0)
- [CVE-2004-2452](https://insights.sbomify.com/CVE-2004-2452/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-2451](https://insights.sbomify.com/CVE-2004-2451/): Missing authorization in n/a (medium 5.0)
- [CVE-2004-2450](https://insights.sbomify.com/CVE-2004-2450/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-2449](https://insights.sbomify.com/CVE-2004-2449/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2448](https://insights.sbomify.com/CVE-2004-2448/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-2447](https://insights.sbomify.com/CVE-2004-2447/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2446](https://insights.sbomify.com/CVE-2004-2446/): Path traversal in n/a (medium 5.0)
- [CVE-2004-2445](https://insights.sbomify.com/CVE-2004-2445/): Path traversal in n/a (medium 5.0)
- [CVE-2004-2444](https://insights.sbomify.com/CVE-2004-2444/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2443](https://insights.sbomify.com/CVE-2004-2443/): Auth bypass in n/a (high 7.5)
- [CVE-2004-2442](https://insights.sbomify.com/CVE-2004-2442/): Security feature bypass in n/a (medium 5.0)
- [CVE-2004-2441](https://insights.sbomify.com/CVE-2004-2441/): Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related to a "potential sec (critical 10.0)
- [CVE-2004-2440](https://insights.sbomify.com/CVE-2004-2440/): Information disclosure in n/a (low 2.1)
- [CVE-2004-2439](https://insights.sbomify.com/CVE-2004-2439/): Missing authorization in n/a (medium 5.0)
- [CVE-2004-2438](https://insights.sbomify.com/CVE-2004-2438/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2437](https://insights.sbomify.com/CVE-2004-2437/): SQL injection in n/a (high 7.5)
- [CVE-2004-2436](https://insights.sbomify.com/CVE-2004-2436/): Hardcoded credentials in n/a (low 2.1)
- [CVE-2004-2435](https://insights.sbomify.com/CVE-2004-2435/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2434](https://insights.sbomify.com/CVE-2004-2434/): Null dereference in n/a (medium 5.0)
- [CVE-2004-2433](https://insights.sbomify.com/CVE-2004-2433/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2432](https://insights.sbomify.com/CVE-2004-2432/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2431](https://insights.sbomify.com/CVE-2004-2431/): Auth bypass in n/a (high 7.5)
- [CVE-2004-2430](https://insights.sbomify.com/CVE-2004-2430/): Privilege escalation in n/a (high 7.2)
- [CVE-2004-2429](https://insights.sbomify.com/CVE-2004-2429/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2428](https://insights.sbomify.com/CVE-2004-2428/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-2427](https://insights.sbomify.com/CVE-2004-2427/): Missing authorization in n/a (critical 10.0)
- [CVE-2004-2426](https://insights.sbomify.com/CVE-2004-2426/): Path traversal in n/a (medium 5.0)
- [CVE-2004-2425](https://insights.sbomify.com/CVE-2004-2425/): Command injection in n/a (high 7.5)
- [CVE-2004-2424](https://insights.sbomify.com/CVE-2004-2424/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2423](https://insights.sbomify.com/CVE-2004-2423/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2422](https://insights.sbomify.com/CVE-2004-2422/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2421](https://insights.sbomify.com/CVE-2004-2421/): Auth bypass in n/a (critical 10.0)
- [CVE-2004-2420](https://insights.sbomify.com/CVE-2004-2420/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2419](https://insights.sbomify.com/CVE-2004-2419/): Information disclosure in n/a (low 2.1)
- [CVE-2004-2418](https://insights.sbomify.com/CVE-2004-2418/): Memory corruption in n/a (high 7.2)
- [CVE-2004-2417](https://insights.sbomify.com/CVE-2004-2417/): Other in n/a (high 7.5)
- [CVE-2004-2416](https://insights.sbomify.com/CVE-2004-2416/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2415](https://insights.sbomify.com/CVE-2004-2415/): Davenport before 0.9.10 allows attackers to cause a denial of service (resource consumption) via (1) a very large XML file or (2) entity expansion attacks. (medium 5.0)
- [CVE-2004-2414](https://insights.sbomify.com/CVE-2004-2414/): Information disclosure in n/a (low 2.1)
- [CVE-2004-2413](https://insights.sbomify.com/CVE-2004-2413/): SQL injection in n/a (high 7.5)
- [CVE-2004-2412](https://insights.sbomify.com/CVE-2004-2412/): SQL injection in n/a (high 7.5)
- [CVE-2004-2411](https://insights.sbomify.com/CVE-2004-2411/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2410](https://insights.sbomify.com/CVE-2004-2410/): Null dereference in n/a (low 2.1)
- [CVE-2004-2409](https://insights.sbomify.com/CVE-2004-2409/): Memory corruption in n/a (high 7.2)
- [CVE-2004-2408](https://insights.sbomify.com/CVE-2004-2408/): Information disclosure in n/a (low 3.6)
- [CVE-2004-2407](https://insights.sbomify.com/CVE-2004-2407/): Unknown vulnerability in phpGroupWare before 0.9.14.002 has unknown attack vectors and impact, related to a "security hole" in the Setup/Config functionality. (critical 10.0)
- [CVE-2004-2406](https://insights.sbomify.com/CVE-2004-2406/): Other in n/a (critical 10.0)
- [CVE-2004-2405](https://insights.sbomify.com/CVE-2004-2405/): Memory corruption in n/a (medium 6.4)
- [CVE-2004-2403](https://insights.sbomify.com/CVE-2004-2403/): Cross-site request forgery in n/a (critical 10.0)
- [CVE-2004-2402](https://insights.sbomify.com/CVE-2004-2402/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2401](https://insights.sbomify.com/CVE-2004-2401/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2400](https://insights.sbomify.com/CVE-2004-2400/): Hardcoded credentials in n/a (low 2.1)
- [CVE-2004-2399](https://insights.sbomify.com/CVE-2004-2399/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2398](https://insights.sbomify.com/CVE-2004-2398/): Information disclosure in n/a (low 2.1)
- [CVE-2004-2397](https://insights.sbomify.com/CVE-2004-2397/): Information disclosure in n/a (high 7.5)
- [CVE-2004-2396](https://insights.sbomify.com/CVE-2004-2396/): Other in n/a (high 7.2)
- [CVE-2004-2395](https://insights.sbomify.com/CVE-2004-2395/): Denial of service in n/a (low 2.1)
- [CVE-2004-2394](https://insights.sbomify.com/CVE-2004-2394/): Weak cryptography in n/a (low 2.1)
- [CVE-2004-2393](https://insights.sbomify.com/CVE-2004-2393/): Auth bypass in n/a (high 7.5)
- [CVE-2004-2392](https://insights.sbomify.com/CVE-2004-2392/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2391](https://insights.sbomify.com/CVE-2004-2391/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2390](https://insights.sbomify.com/CVE-2004-2390/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2389](https://insights.sbomify.com/CVE-2004-2389/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2388](https://insights.sbomify.com/CVE-2004-2388/): Race condition in n/a (critical 10.0)
- [CVE-2004-2387](https://insights.sbomify.com/CVE-2004-2387/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2386](https://insights.sbomify.com/CVE-2004-2386/): Other in n/a (high 7.5)
- [CVE-2004-2385](https://insights.sbomify.com/CVE-2004-2385/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-2384](https://insights.sbomify.com/CVE-2004-2384/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2383](https://insights.sbomify.com/CVE-2004-2383/): Security feature bypass in n/a (medium 5.1)
- [CVE-2004-2382](https://insights.sbomify.com/CVE-2004-2382/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2381](https://insights.sbomify.com/CVE-2004-2381/): Jetty HTTP Server Denial of Service vulnerability (medium 5.0)
- [CVE-2004-2380](https://insights.sbomify.com/CVE-2004-2380/): Path traversal in n/a (medium 5.0)
- [CVE-2004-2379](https://insights.sbomify.com/CVE-2004-2379/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-2378](https://insights.sbomify.com/CVE-2004-2378/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2377](https://insights.sbomify.com/CVE-2004-2377/): Denial of service in n/a (medium 5.0)
- [CVE-2004-2376](https://insights.sbomify.com/CVE-2004-2376/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2375](https://insights.sbomify.com/CVE-2004-2375/): Memory corruption in n/a (high 7.5)
- [CVE-2004-2374](https://insights.sbomify.com/CVE-2004-2374/): Information disclosure in n/a (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2004/page/4/