Skip to content
OpenAdvisories

Archive

April 2003

Vulnerabilities first published in this month (UTC), newest first.

  1. 15
  2. 2350
  3. 34
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 82
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 1513
  16. 162
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2614
  27. 27 
  28. 28 
  29. 296
  30. 301

5 results · Clear filters · Feed

  • High 7.8
    CVE-2002-0367 Exploited Public exploit

    smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to oth…

    KEV Mar 3, 2022
  • High —

    Apache Tomcat may be started without proper security settings

    Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.

  • High —

    Zope does not properly verify the access for objects with proxy roles

    Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.

  • High —

    ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions

    ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.

  • High —

    Zope does not properly perform security registration for legacy names

    Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.