# CVEs published 2004-07-16

7 CVEs were published on July 16, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0594](https://cve.now/CVE-2004-0594.md): The memory\_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register\_globals is ena (no CVSS)
- [CVE-2004-0595](https://cve.now/CVE-2004-0595.md): The strip\_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\\0) characters within tag names when restricti (no CVSS)
- [CVE-2004-0632](https://cve.now/CVE-2004-0632.md): Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to e (no CVSS)
- [CVE-2004-0695](https://cve.now/CVE-2004-0695.md): Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long (no CVSS)
- [CVE-2004-0696](https://cve.now/CVE-2004-0696.md): The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired (no CVSS)
- [CVE-2004-0697](https://cve.now/CVE-2004-0697.md): Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sen (no CVSS)
- [CVE-2004-0698](https://cve.now/CVE-2004-0698.md): 4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-07-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.