# Vulnerabilities published in 2004


- [CVE-2004-1971](https://insights.sbomify.com/CVE-2004-1971/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-1970](https://insights.sbomify.com/CVE-2004-1970/): Auth bypass in n/a (high 7.5)
- [CVE-2004-1969](https://insights.sbomify.com/CVE-2004-1969/): File upload in n/a (high 7.5)
- [CVE-2004-1968](https://insights.sbomify.com/CVE-2004-1968/): Missing authorization in n/a (medium 5.0)
- [CVE-2004-1967](https://insights.sbomify.com/CVE-2004-1967/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2004-1966](https://insights.sbomify.com/CVE-2004-1966/): SQL injection in n/a (high 7.5)
- [CVE-2004-1965](https://insights.sbomify.com/CVE-2004-1965/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1964](https://insights.sbomify.com/CVE-2004-1964/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1963](https://insights.sbomify.com/CVE-2004-1963/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-1962](https://insights.sbomify.com/CVE-2004-1962/): SQL injection in n/a (high 7.5)
- [CVE-2004-1961](https://insights.sbomify.com/CVE-2004-1961/): SQL injection in n/a (high 7.5)
- [CVE-2004-1960](https://insights.sbomify.com/CVE-2004-1960/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1959](https://insights.sbomify.com/CVE-2004-1959/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-1958](https://insights.sbomify.com/CVE-2004-1958/): Path traversal in n/a (medium 5.0)
- [CVE-2004-1957](https://insights.sbomify.com/CVE-2004-1957/): Cross-site scripting in n/a (low 2.6)
- [CVE-2004-1956](https://insights.sbomify.com/CVE-2004-1956/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-1955](https://insights.sbomify.com/CVE-2004-1955/): SQL injection in n/a (high 7.5)
- [CVE-2004-1954](https://insights.sbomify.com/CVE-2004-1954/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1953](https://insights.sbomify.com/CVE-2004-1953/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-1952](https://insights.sbomify.com/CVE-2004-1952/): SQL injection in n/a (high 7.5)
- [CVE-2004-1951](https://insights.sbomify.com/CVE-2004-1951/): Path traversal in n/a (medium 5.0)
- [CVE-2004-1950](https://insights.sbomify.com/CVE-2004-1950/): Security feature bypass in n/a (medium 5.0)
- [CVE-2004-1949](https://insights.sbomify.com/CVE-2004-1949/): SQL injection in n/a (high 7.5)
- [CVE-2004-1948](https://insights.sbomify.com/CVE-2004-1948/): Information disclosure in n/a (medium 4.6)
- [CVE-2004-1947](https://insights.sbomify.com/CVE-2004-1947/): Code injection in n/a (medium 5.0)
- [CVE-2004-1946](https://insights.sbomify.com/CVE-2004-1946/): Code injection in n/a (medium 4.6)
- [CVE-2004-1945](https://insights.sbomify.com/CVE-2004-1945/): Memory corruption in n/a (high 7.5)
- [CVE-2004-1944](https://insights.sbomify.com/CVE-2004-1944/): Denial of service in n/a (medium 5.0)
- [CVE-2004-1943](https://insights.sbomify.com/CVE-2004-1943/): File upload in n/a (high 7.5)
- [CVE-2004-1942](https://insights.sbomify.com/CVE-2004-1942/): Information disclosure in n/a (high 7.5)
- [CVE-2004-1941](https://insights.sbomify.com/CVE-2004-1941/): Denial of service in n/a (medium 5.0)
- [CVE-2004-1940](https://insights.sbomify.com/CVE-2004-1940/): Denial of service in n/a (medium 5.0)
- [CVE-2004-1939](https://insights.sbomify.com/CVE-2004-1939/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1938](https://insights.sbomify.com/CVE-2004-1938/): SQL injection in n/a (high 7.5)
- [CVE-2004-1937](https://insights.sbomify.com/CVE-2004-1937/): Path traversal in n/a (medium 5.0)
- [CVE-2004-1936](https://insights.sbomify.com/CVE-2004-1936/): Security feature bypass in n/a (high 7.5)
- [CVE-2004-1935](https://insights.sbomify.com/CVE-2004-1935/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1934](https://insights.sbomify.com/CVE-2004-1934/): Code injection in n/a (high 7.5)
- [CVE-2004-1933](https://insights.sbomify.com/CVE-2004-1933/): Information disclosure in n/a (low 2.1)
- [CVE-2004-1932](https://insights.sbomify.com/CVE-2004-1932/): SQL injection in n/a (high 7.5)
- [CVE-2004-1930](https://insights.sbomify.com/CVE-2004-1930/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1929](https://insights.sbomify.com/CVE-2004-1929/): SQL injection in n/a (high 7.5)
- [CVE-2004-1928](https://insights.sbomify.com/CVE-2004-1928/): File upload in n/a (high 7.5)
- [CVE-2004-1927](https://insights.sbomify.com/CVE-2004-1927/): Path traversal in n/a (medium 5.0)
- [CVE-2004-1926](https://insights.sbomify.com/CVE-2004-1926/): Code injection in n/a (high 7.5)
- [CVE-2004-1925](https://insights.sbomify.com/CVE-2004-1925/): SQL injection in n/a (high 7.5)
- [CVE-2004-1924](https://insights.sbomify.com/CVE-2004-1924/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1923](https://insights.sbomify.com/CVE-2004-1923/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-1922](https://insights.sbomify.com/CVE-2004-1922/): Denial of service in n/a (low 2.6)
- [CVE-2004-1921](https://insights.sbomify.com/CVE-2004-1921/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2004-1920](https://insights.sbomify.com/CVE-2004-1920/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2004-1919](https://insights.sbomify.com/CVE-2004-1919/): Denial of service in n/a (medium 5.0)
- [CVE-2004-1918](https://insights.sbomify.com/CVE-2004-1918/): Denial of service in n/a (medium 5.0)
- [CVE-2004-1917](https://insights.sbomify.com/CVE-2004-1917/): Other in n/a (high 7.5)
- [CVE-2004-1916](https://insights.sbomify.com/CVE-2004-1916/): Memory corruption in n/a (high 7.5)
- [CVE-2004-1915](https://insights.sbomify.com/CVE-2004-1915/): Memory corruption in n/a (high 7.5)
- [CVE-2004-1914](https://insights.sbomify.com/CVE-2004-1914/): SQL injection in n/a (high 7.5)
- [CVE-2004-1913](https://insights.sbomify.com/CVE-2004-1913/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1912](https://insights.sbomify.com/CVE-2004-1912/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-1911](https://insights.sbomify.com/CVE-2004-1911/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1910](https://insights.sbomify.com/CVE-2004-1910/): Denial of service in n/a (medium 5.0)
- [CVE-2004-1909](https://insights.sbomify.com/CVE-2004-1909/): Denial of service in n/a (low 2.6)
- [CVE-2004-1908](https://insights.sbomify.com/CVE-2004-1908/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-1907](https://insights.sbomify.com/CVE-2004-1907/): Denial of service in n/a (low 2.6)
- [CVE-2004-1906](https://insights.sbomify.com/CVE-2004-1906/): Memory corruption in n/a (medium 5.0)
- [CVE-2004-1905](https://insights.sbomify.com/CVE-2004-1905/): Denial of service in n/a (medium 5.0)
- [CVE-2004-1904](https://insights.sbomify.com/CVE-2004-1904/): Memory corruption in n/a (high 7.5)
- [CVE-2004-1903](https://insights.sbomify.com/CVE-2004-1903/): Memory corruption in n/a (critical 10.0)
- [CVE-2004-1902](https://insights.sbomify.com/CVE-2004-1902/): Information disclosure in n/a (low 2.1)
- [CVE-2004-1901](https://insights.sbomify.com/CVE-2004-1901/): Path traversal in n/a (medium 5.5)
- [CVE-2004-1900](https://insights.sbomify.com/CVE-2004-1900/): Memory corruption in n/a (high 7.5)
- [CVE-2004-1899](https://insights.sbomify.com/CVE-2004-1899/): Memory corruption in n/a (medium 5.0)
- [CVE-2004-1898](https://insights.sbomify.com/CVE-2004-1898/): Memory corruption in n/a (critical 10.0)
- [CVE-2004-1897](https://insights.sbomify.com/CVE-2004-1897/): Null dereference in n/a (medium 5.0)
- [CVE-2004-1896](https://insights.sbomify.com/CVE-2004-1896/): Memory corruption in n/a (high 7.6)
- [CVE-2004-1895](https://insights.sbomify.com/CVE-2004-1895/): Path traversal in n/a (low 2.1)
- [CVE-2004-1894](https://insights.sbomify.com/CVE-2004-1894/): Path traversal in n/a (low 2.1)
- [CVE-2004-1893](https://insights.sbomify.com/CVE-2004-1893/): Missing authorization in n/a (medium 5.0)
- [CVE-2004-1892](https://insights.sbomify.com/CVE-2004-1892/): Memory corruption in n/a (high 7.5)
- [CVE-2004-1891](https://insights.sbomify.com/CVE-2004-1891/): Information disclosure in n/a (medium 5.0)
- [CVE-2004-1890](https://insights.sbomify.com/CVE-2004-1890/): Denial of service in n/a (medium 5.0)
- [CVE-2004-1889](https://insights.sbomify.com/CVE-2004-1889/): Denial of service in n/a (medium 5.0)
- [CVE-2004-1888](https://insights.sbomify.com/CVE-2004-1888/): Command injection in n/a (high 7.5)
- [CVE-2004-1887](https://insights.sbomify.com/CVE-2004-1887/): Path traversal in n/a (medium 5.0)
- [CVE-2004-1885](https://insights.sbomify.com/CVE-2004-1885/): Privilege escalation in n/a (high 7.2)
- [CVE-2004-1884](https://insights.sbomify.com/CVE-2004-1884/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2004-1883](https://insights.sbomify.com/CVE-2004-1883/): Memory corruption in n/a (high 7.2)
- [CVE-2004-1882](https://insights.sbomify.com/CVE-2004-1882/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1881](https://insights.sbomify.com/CVE-2004-1881/): SQL injection in n/a (high 7.5)
- [CVE-2004-1880](https://insights.sbomify.com/CVE-2004-1880/): Denial of service in n/a (medium 5.0)
- [CVE-2004-1879](https://insights.sbomify.com/CVE-2004-1879/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1878](https://insights.sbomify.com/CVE-2004-1878/): Auth bypass in n/a (medium 5.0)
- [CVE-2004-1877](https://insights.sbomify.com/CVE-2004-1877/): Open redirect in n/a (low 2.6)
- [CVE-2004-1876](https://insights.sbomify.com/CVE-2004-1876/): Command injection in n/a (medium 4.6)
- [CVE-2004-1875](https://insights.sbomify.com/CVE-2004-1875/): Cross-site scripting in n/a (critical 9.3)
- [CVE-2004-1874](https://insights.sbomify.com/CVE-2004-1874/): Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2) billing.asp in A-CART Pro and A-CART 2.0 allow remote attacke (medium 4.3)
- [CVE-2004-1873](https://insights.sbomify.com/CVE-2004-1873/): SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via the catcode parameter. (high 7.5)
- [CVE-2004-1872](https://insights.sbomify.com/CVE-2004-1872/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1871](https://insights.sbomify.com/CVE-2004-1871/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2004-1870](https://insights.sbomify.com/CVE-2004-1870/): SQL injection in n/a (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2004/page/9/