Archive
April 2003
Vulnerabilities first published in this month (UTC), newest first.
397 results · Feed
-
Unscored —
Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary…
-
Unscored —
Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer j…
-
Unscored —
config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers …
-
Unscored —
FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption) via a flood of Access-R…
-
Unscored —
Directory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read arbitrary code via a ..…
-
Unscored —
Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication…
-
Unscored —CVE-2002-0368 EPSS 15%
The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via…
-
Unscored —
Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to exe…
-
Unscored —
pforum 1.14 and earlier does not explicitly enable PHP magic quotes, which allows remote attackers to bypass authentica…
-
Unscored —
The iBCS routines in arch/i386/kernel/traps.c for Linux kernels 2.4.18 and earlier on x86 systems allow local users to …
-
Unscored —CVE-2002-0074 EPSS 37%
Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 …
-
Unscored —CVE-2002-0953 Public exploit
globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows rem…
-
Unscored —
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a r…
-
Unscored —
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the t…
-
Unscored —
The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue …
-
Unscored —
The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script…
-
Unscored —CVE-2002-0824 Public exploit
BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specifi…
-
Unscored —
Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a lo…
-
Unscored —
Format string vulnerability in log_print() function of Posadis DNS server before version m5pre2 allows local users and …
-
Unscored —
Cross-site scripting vulnerability in browse.php for PHP(Reactor) 1.2.7 allows remote attackers to execute script as ot…
-
Unscored —
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local user…
-
Unscored —CVE-2002-0736 EPSS 35%
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass …
-
Unscored —CVE-2002-0639 EPSS 18%
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challeng…
-
Unscored —CVE-2002-0697 EPSS 18%
Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data b…
-
Unscored —
URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in …
-
Unscored —
Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javasc…
-
Unscored —
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attach…
-
Unscored —
Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large n…
-
Unscored —CVE-2002-0887 Public exploit
scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attac…
-
Unscored —
Red-M 1050 (Bluetooth Access Point) uses case insensitive passwords, which makes it easier for attackers to conduct a b…
-
Unscored —
ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofe…
-
Unscored —
File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-…
-
Unscored —CVE-2002-0698 EPSS 20%
Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute a…
-
Unscored —
Web authoring command in Microsoft Content Management Server (MCMS) 2001 allows attackers to authenticate and upload ex…
-
Unscored —
Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2…
-
Unscored —
uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file…
-
Unscored —CVE-2002-0553 Public exploit
Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges…
-
Unscored —CVE-2002-0995 Public exploit
login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action para…
-
Unscored —
dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges b…
-
Unscored —
Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via for…