# CVEs published 2004-07-23 27 CVEs were published on July 23, 2004: 0 critical, 0 high. Days are UTC. - [CVE-2004-0600](https://cve.now/CVE-2004-0600.md): Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an (no CVSS) - [CVE-2004-0686](https://cve.now/CVE-2004-0686.md): Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown im (no CVSS) - [CVE-2004-0717](https://cve.now/CVE-2004-0717.md): Opera 7.51 for Windows and 7.50 for Linux does not properly prevent a frame in one domain from injecting content into a frame that belongs t (no CVSS) - [CVE-2004-0718](https://cve.now/CVE-2004-0718.md): The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from (no CVSS) - [CVE-2004-0719](https://cve.now/CVE-2004-0719.md): Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one do (no CVSS) - [CVE-2004-0720](https://cve.now/CVE-2004-0720.md): Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facil (no CVSS) - [CVE-2004-0721](https://cve.now/CVE-2004-0721.md): Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that (no CVSS) - [CVE-2004-0723](https://cve.now/CVE-2004-0723.md): Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between (no CVSS) - [CVE-2004-0724](https://cve.now/CVE-2004-0724.md): The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service (server or client crash) via an empty fragmente (no CVSS) - [CVE-2004-0725](https://cve.now/CVE-2004-0725.md): Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2004-0726](https://cve.now/CVE-2004-0726.md): The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone vi (no CVSS) - [CVE-2004-0727](https://cve.now/CVE-2004-0727.md): Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers (no CVSS) - [CVE-2004-0728](https://cve.now/CVE-2004-0728.md): The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of se (no CVSS) - [CVE-2004-0729](https://cve.now/CVE-2004-0729.md): PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid (1) category\_rows parameter to index.php, (2) faq parameter (no CVSS) - [CVE-2004-0730](https://cve.now/CVE-2004-0730.md): Multiple cross-site scripting (XSS) vulnerabilities in PhpBB 2.0.8 allow remote attackers to inject arbitrary web script or HTML via (1) the (no CVSS) - [CVE-2004-0731](https://cve.now/CVE-2004-0731.md): Cross-site scripting (XSS) vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary script a (no CVSS) - [CVE-2004-0732](https://cve.now/CVE-2004-0732.md): SQL injection vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to execute arbitrary SQL statements via t (no CVSS) - [CVE-2004-0733](https://cve.now/CVE-2004-0733.md): Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (no CVSS) - [CVE-2004-0734](https://cve.now/CVE-2004-0734.md): Web\_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter. (no CVSS) - [CVE-2004-0735](https://cve.now/CVE-2004-0735.md): Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earl (no CVSS) - [CVE-2004-0736](https://cve.now/CVE-2004-0736.md): The search module in Php-Nuke allows remote attackers to gain sensitive information via the (1) "\*\*" or (2) "+" search patterns, which revea (no CVSS) - [CVE-2004-0737](https://cve.now/CVE-2004-0737.md): Multiple cross-site scripting vulnerabilities in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2004-0738](https://cve.now/CVE-2004-0738.md): Multiple SQL injection vulnerabilities in the Search module in Php-Nuke allow remote attackers to execute arbitrary SQL via the (1) min or ( (no CVSS) - [CVE-2004-0739](https://cve.now/CVE-2004-0739.md): Buffer overflow in Whisper FTP Surfer 1.0.7 allows remote FTP servers to cause a denial of service (client crash) and possibly execute arbit (no CVSS) - [CVE-2004-0740](https://cve.now/CVE-2004-0740.md): The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service (server crash, reload, or han (no CVSS) - [CVE-2004-0741](https://cve.now/CVE-2004-0741.md): LionMax Software WWW File Share Pro 2.60 allows remote attackers to cause a denial of service (crash or hang) via a long URL, possibly trigg (no CVSS) - [CVE-2004-0742](https://cve.now/CVE-2004-0742.md): Sun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain Calendar Server privileges and modify Calen (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2004-07-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.