Skip to content
OpenAdvisories

Archive

18 March 2003

Vulnerabilities first published on this day (UTC), newest first.

← February 2003 2003 / March /18 April 2003 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 132
  14. 143
  15. 15 
  16. 16 
  17. 17 
  18. 1896
  19. 19 
  20. 20 
  21. 2113
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2611
  27. 272
  28. 281
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

44 results · Clear filters · Feed

  • Unscored —
    CVE-2002-1512 Public exploit

    xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink att…

  • Unscored —
    CVE-2002-1483 Public exploit

    db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP req…

  • Unscored —
    CVE-2002-1522 Public exploit EPSS 14%

    Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2002-1527 Public exploit

    emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed s…

  • Unscored —
    CVE-2002-1495 Public exploit

    Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML …

  • Unscored —
    CVE-2002-1457 Public exploit

    SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements …

  • Unscored —
    CVE-2002-1559 Public exploit

    Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (…

  • Unscored —
    CVE-2002-1428 Public exploit

    index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the user_cook…

  • Unscored —
    CVE-2002-1445 Public exploit

    Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users …

  • Unscored —
    CVE-2002-1473 Public exploit

    Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of se…

  • Unscored —
    CVE-2002-1452 Public exploit

    Buffer overflow in the search capability for MyWebServer 1.0.2 allows remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2002-1487 Public exploit EPSS 14%

    The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by…

  • Unscored —
    CVE-2002-1456 Public exploit EPSS 12%

    Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.

  • Unscored —
    CVE-2002-1423 Public exploit

    tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the f…

  • Unscored —
    CVE-2002-1422 Public exploit

    admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in t…

  • Unscored —
    CVE-2002-1426 Public exploit EPSS 20%

    HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request…

  • Unscored —
    CVE-2002-1432 Public exploit

    MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sens…

  • Unscored —
    CVE-2002-1542 Public exploit EPSS 13%

    SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP …

  • Unscored —
    CVE-2002-1492 Public exploit

    Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, all…

  • Unscored —
    CVE-2002-1525 Public exploit

    Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to …

  • Unscored —
    CVE-2002-1455 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into w…

  • Unscored —
    CVE-2002-1482 Public exploit

    SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remot…

  • Unscored —
    CVE-2002-1484 Public exploit EPSS 14%

    DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and atte…

  • Unscored —
    CVE-2002-1410 Public exploit

    Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries …

  • Unscored —
    CVE-2002-1503 Public exploit

    Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long…

  • Unscored —
    CVE-2002-1486 Public exploit

    Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a…

  • Unscored —
    CVE-2002-1444 Public exploit EPSS 14%

    The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2002-1429 Public exploit

    Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML…

  • Unscored —
    CVE-2002-1488 Public exploit

    The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) vi…

  • Unscored —
    CVE-2002-1453 Public exploit

    Cross-site scripting (XSS) vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a l…

  • Unscored —
    CVE-2002-1526 Public exploit

    Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary…

  • Medium —
    CVE-2002-1533 Public exploit

    Jetty Javascript Inclusion Vulnerability

    Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).

    org.mortbay.jetty:jetty Maven
  • Unscored —
    CVE-2002-1481 Public exploit

    savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a de…

  • Unscored —
    CVE-2002-1451 Public exploit

    Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via a…

  • Unscored —
    CVE-2002-1499 Public exploit

    Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database acti…

  • Unscored —
    CVE-2002-1434 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attacke…

  • Unscored —
    CVE-2002-1480 Public exploit

    Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or scrip…

  • Unscored —
    CVE-2002-1489 Public exploit EPSS 11%

    Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HT…

  • Unscored —
    CVE-2002-1506 Public exploit

    Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG envir…

  • Unscored —
    CVE-2002-1427 Public exploit

    The print_html_to_file function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows…