Skip to content
OpenAdvisories

Archive

March 2003

Vulnerabilities first published in this month (UTC), newest first.

← February 2003 2003 / March April 2003 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 132
  14. 143
  15. 15 
  16. 16 
  17. 17 
  18. 1896
  19. 19 
  20. 20 
  21. 2113
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2611
  27. 272
  28. 281
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

136 results · Feed

  • Unscored —
    CVE-2002-1462

    details2.php in OrganicPHP PHP-affiliate 1.0, and possibly later versions, allows remote attackers to modify informatio…

  • Unscored —
    CVE-2002-1441

    Multiple buffer overflows in Tomahawk SteelArrow before 4.5 allow remote attackers to execute arbitrary code via (1) th…

  • Unscored —
    CVE-2002-1484 Public exploit EPSS 14%

    DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and atte…

  • Unscored —
    CVE-2002-1546

    BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an H…

  • Unscored —
    CVE-2002-1474

    Unknown vulnerability or vulnerabilities in TCP/IP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attac…

  • Unscored —
    CVE-2002-1410 Public exploit

    Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries …

  • Unscored —
    CVE-2002-1504

    Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via "..\…

  • Unscored —
    CVE-2002-1440

    The Gateway GS-400 server has a default root password of "0001n" that can not be changed via the administrative interfa…

  • Unscored —
    CVE-2002-1556

    Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP re…

  • Unscored —
    CVE-2002-1454

    MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a d…

  • Unscored —
    CVE-2002-1503 Public exploit

    Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long…

  • Unscored —
    CVE-2002-1486 Public exploit

    Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a…

  • Unscored —
    CVE-2002-1460

    L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set b…

  • Unscored —
    CVE-2002-1421

    SQL injection vulnerabilities in FUDforum before 2.2.0 allow remote attackers to perform unauthorized database operatio…

  • Unscored —
    CVE-2002-1444 Public exploit EPSS 14%

    The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2002-1411

    Directory traversal vulnerability in update.dpgs in Duma Photo Gallery System (DPGS) 0.99.4 allows remote attackers to …

  • Unscored —
    CVE-2002-1429 Public exploit

    Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML…

  • Unscored —
    CVE-2002-1536

    Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host varia…

  • Unscored —
    CVE-2002-1488 Public exploit

    The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) vi…

  • Unscored —
    CVE-2002-1453 Public exploit

    Cross-site scripting (XSS) vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a l…

  • Unscored —
    CVE-2002-1475

    Unknown vulnerability in the ARP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to "take over…

  • Unscored —
    CVE-2002-1515

    Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files v…

  • Unscored —
    CVE-2002-1406

    Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior."

  • Unscored —
    CVE-2002-1409

    ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service (data page fault panic) via "an inc…

  • Unscored —
    CVE-2002-1498

    Directory traversal vulnerability in SWServer 2.2 and earlier allows remote attackers to read arbitrary files via a URL…

  • Unscored —
    CVE-2002-1526 Public exploit

    Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary…

  • Medium —
    CVE-2002-1533 Public exploit

    Jetty Javascript Inclusion Vulnerability

    Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).

    org.mortbay.jetty:jetty Maven
  • Unscored —
    CVE-2002-1458

    Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows…

  • Unscored —
    CVE-2002-1481 Public exploit

    savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a de…

  • Unscored —
    CVE-2002-1451 Public exploit

    Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via a…

  • Unscored —
    CVE-2002-1499 Public exploit

    Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database acti…

  • Unscored —
    CVE-2002-1431

    Belkin F5D5230-4 4-Port Cable/DSL Gateway Router 1.20.000 modifies the source IP address of internal packets to that of…

  • Unscored —
    CVE-2002-1464

    Cross-site scripting (XSS) vulnerability in CafeLog b2 Weblog Tool allows remote attackers to insert arbitrary HTML or …

  • Unscored —
    CVE-2002-1439

    Unknown vulnerability related to stack corruption in the TGA daemon for HP-UX 11.04 (VVOS) Virtualvault 4.0, 4.5, and 4…

  • Unscored —
    CVE-2002-1434 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attacke…

  • Unscored —
    CVE-2002-1480 Public exploit

    Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or scrip…

  • Unscored —
    CVE-2002-1489 Public exploit EPSS 11%

    Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HT…

  • Unscored —
    CVE-2002-1506 Public exploit

    Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG envir…

  • Unscored —
    CVE-2002-1467

    Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrar…

  • Unscored —
    CVE-2002-1466

    CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PHP code vi…