# CVEs published 2004-01-22

4 CVEs were published on January 22, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0700](https://cve.now/CVE-2003-0700.md): The C-Media PCI sound driver in Linux before 2.4.22 does not use the get\_user function to access userspace in certain conditions, which cros (no CVSS)
- [CVE-2003-1031](https://cve.now/CVE-2003-1031.md): Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web sc (no CVSS)
- [CVE-2004-0074](https://cve.now/CVE-2004-0074.md): Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdi (no CVSS)
- [CVE-2004-0091](https://cve.now/CVE-2004-0091.md): NOTE: this issue has been disputed by the vendor. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-01-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
