Skip to content
OpenAdvisories

Archive

18 March 2003

Vulnerabilities first published on this day (UTC), newest first.

← February 2003 2003 / March /18 April 2003 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 132
  14. 143
  15. 15 
  16. 16 
  17. 17 
  18. 1896
  19. 19 
  20. 20 
  21. 2113
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2611
  27. 272
  28. 281
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

96 results · Feed

  • Unscored —
    CVE-2002-0690

    Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2002-1415

    Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a deni…

  • Unscored —
    CVE-2002-1512 Public exploit

    xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink att…

  • Unscored —
    CVE-2002-1557

    Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, T…

  • Unscored —
    CVE-2002-1483 Public exploit

    db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP req…

  • Unscored —
    CVE-2002-1558

    Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ an…

  • Unscored —
    CVE-2002-1470

    SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to por…

  • Unscored —
    CVE-2002-1554

    Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database fo…

  • Unscored —
    CVE-2002-1522 Public exploit EPSS 14%

    Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2002-1527 Public exploit

    emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed s…

  • Unscored —
    CVE-2002-1495 Public exploit

    Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML …

  • Unscored —
    CVE-2002-1433

    Kerio MailServer 5.0 allows remote attackers to cause a denial of service (hang) via SYN packets to the supported netwo…

  • Unscored —
    CVE-2002-1555

    Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which …

  • Unscored —
    CVE-2002-1442

    The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including scri…

  • Unscored —
    CVE-2002-1457 Public exploit

    SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements …

  • Unscored —
    CVE-2002-1559 Public exploit

    Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (…

  • Unscored —
    CVE-2002-1545

    CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD co…

  • Unscored —
    CVE-2002-1428 Public exploit

    index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the user_cook…

  • Unscored —
    CVE-2002-1449

    eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attacke…

  • Unscored —
    CVE-2002-1445 Public exploit

    Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users …

  • Unscored —
    CVE-2002-1450

    IBM UniVerse with UV/ODBC allows attackers to cause a denial of service (client crash or server CPU consumption) via a …

  • Unscored —
    CVE-2002-1473 Public exploit

    Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of se…

  • Unscored —
    CVE-2002-1452 Public exploit

    Buffer overflow in the search capability for MyWebServer 1.0.2 allows remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2002-1487 Public exploit EPSS 14%

    The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by…

  • Unscored —
    CVE-2002-1456 Public exploit EPSS 12%

    Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.

  • Unscored —
    CVE-2002-1553

    Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delet…

  • Unscored —
    CVE-2002-1507

    Unreal Tournament 2003 (ut2003) clients and servers allow remote attackers to cause a denial of service via malformed m…

  • Unscored —
    CVE-2002-1459

    Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allow…

  • Unscored —
    CVE-2002-1544

    Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbit…

  • Unscored —
    CVE-2002-1423 Public exploit

    tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the f…

  • Unscored —
    CVE-2002-1422 Public exploit

    admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in t…

  • Unscored —
    CVE-2002-1408

    Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community na…

  • Unscored —
    CVE-2002-1523

    Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via…

  • Unscored —
    CVE-2002-1426 Public exploit EPSS 20%

    HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request…

  • Unscored —
    CVE-2002-1432 Public exploit

    MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sens…

  • Unscored —
    CVE-2002-1461

    Web Shop Manager 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box.

  • Unscored —
    CVE-2002-1535

    Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addres…

  • Unscored —
    CVE-2002-1542 Public exploit EPSS 13%

    SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP …

  • Unscored —
    CVE-2002-1551

    Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code.

  • Unscored —
    CVE-2002-1500

    Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileg…