Skip to content
OpenAdvisories

Archive

March 2003

Vulnerabilities first published in this month (UTC), newest first.

← February 2003 2003 / March April 2003 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 132
  14. 143
  15. 15 
  16. 16 
  17. 17 
  18. 1896
  19. 19 
  20. 20 
  21. 2113
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2611
  27. 272
  28. 281
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

56 results · Clear filters · Feed

  • Unscored —
    CVE-2002-1526 Public exploit

    Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary…

  • Medium —
    CVE-2002-1533 Public exploit

    Jetty Javascript Inclusion Vulnerability

    Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).

    org.mortbay.jetty:jetty Maven
  • Unscored —
    CVE-2002-1481 Public exploit

    savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a de…

  • Unscored —
    CVE-2002-1451 Public exploit

    Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via a…

  • Unscored —
    CVE-2002-1499 Public exploit

    Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database acti…

  • Unscored —
    CVE-2002-1434 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attacke…

  • Unscored —
    CVE-2002-1480 Public exploit

    Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or scrip…

  • Unscored —
    CVE-2002-1489 Public exploit EPSS 11%

    Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HT…

  • Unscored —
    CVE-2002-1506 Public exploit

    Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG envir…

  • Unscored —
    CVE-2002-1427 Public exploit

    The print_html_to_file function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows…

  • Unscored —
    CVE-2002-1539 Public exploit

    Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service …

  • Unscored —
    CVE-2003-0109 Public exploit EPSS 86%

    Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Win…

  • Unscored —
    CVE-2003-0127 Public exploit

    The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root …

  • Unscored —
    CVE-2003-0085 Public exploit EPSS 86%

    Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba…

    samba Debian
  • Unscored —
    CVE-2003-0144 Public exploit

    Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and pos…

    lpr Debian
  • Unscored —
    CVE-2003-0121 Public exploit

    Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not speci…