# CVEs published 2004-07-21

18 CVEs were published on July 21, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1048](https://cve.now/CVE-2003-1048.md): Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2004-0566](https://cve.now/CVE-2004-0566.md): Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits… (no CVSS)
- [CVE-2004-0700](https://cve.now/CVE-2004-0700.md): Format string vulnerability in the mod\_proxy hook functions function in ssl\_engine\_log.c in mod\_ssl before 2.8.19 for Apache before 1.3.31… (no CVSS)
- [CVE-2004-0701](https://cve.now/CVE-2004-0701.md): Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly… (no CVSS)
- [CVE-2004-0702](https://cve.now/CVE-2004-0702.md): DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could… (no CVSS)
- [CVE-2004-0703](https://cve.now/CVE-2004-0703.md): Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to… (no CVSS)
- [CVE-2004-0704](https://cve.now/CVE-2004-0704.md): Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to… (no CVSS)
- [CVE-2004-0705](https://cve.now/CVE-2004-0705.md): Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4)… (no CVSS)
- [CVE-2004-0706](https://cve.now/CVE-2004-0706.md): Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server… (no CVSS)
- [CVE-2004-0707](https://cve.now/CVE-2004-0707.md): SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with… (no CVSS)
- [CVE-2004-0708](https://cve.now/CVE-2004-0708.md): MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has… (no CVSS, moin)
- [CVE-2004-0709](https://cve.now/CVE-2004-0709.md): HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote… (no CVSS)
- [CVE-2004-0710](https://cve.now/CVE-2004-0710.md): IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers running IOS before… (no CVSS)
- [CVE-2004-0711](https://cve.now/CVE-2004-0711.md): The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "" as wildcards as if they were the legal… (no CVSS)
- [CVE-2004-0712](https://cve.now/CVE-2004-0712.md): The configuration tools (1) config.sh in Unix or (2) config.cmd in Windows for BEA WebLogic Server 8.1 through SP2 create a log file that… (no CVSS)
- [CVE-2004-0713](https://cve.now/CVE-2004-0713.md): The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 through SP2, 7.0 through… (no CVSS)
- [CVE-2004-0714](https://cve.now/CVE-2004-0714.md): Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports (UDP 162 and… (no CVSS)
- [CVE-2004-0715](https://cve.now/CVE-2004-0715.md): The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2004-07-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.