Archive
May 2003
Vulnerabilities first published in this month (UTC), newest first.
121 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers …
-
Unscored —CVE-2003-0320 Public exploit
header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admi…
-
Unscored —
Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service (crash) an…
-
Unscored —
IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which c…
-
Unscored —CVE-2003-0314 Public exploit
Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) via a URL that ends in a "</" seq…
-
Unscored —CVE-2003-0306 Public exploit
Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.i…
-
Unscored —CVE-2003-0310 Public exploit
Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitr…
-
Unscored —
Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to list arbitrary directory conte…
-
Unscored —
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other…
-
Unscored —
The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attac…
-
Unscored —
tcpdump does not properly drop privileges to the pcap user when starting up.
-
Unscored —
Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary…
-
Unscored —CVE-2003-0303 Public exploit
SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary…
-
Unscored —
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local u…
-
Unscored —CVE-2003-0312 Public exploit
Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a .. …
-
Unscored —CVE-2003-0315 Public exploit
Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary co…
-
Unscored —CVE-2003-0304 Public exploit
one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calli…
-
Unscored —
Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for …
-
Unscored —
Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separ…
-
Unscored —CVE-2003-0295 Public exploit
Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject ar…
-
Unscored —
The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of serv…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Inktomi Traffic-Server 5.5.1 allows remote attackers to insert arbitrary we…
-
Unscored —
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of se…
-
Unscored —
The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly exec…
-
Unscored —
3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote…
-
Unscored —
The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local use…
-
Unscored —
The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certa…
-
Unscored —CVE-2003-0293 Public exploit
PalmOS allows remote attackers to cause a denial of service (CPU consumption) via a flood of ICMP echo request (ping) p…
-
Unscored —
The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly…
-
Unscored —
autohtml.php in php-proxima 6.0 and earlier allows remote attackers to read arbitrary files via the name parameter in a…
-
Unscored —
The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute…
-
Unscored —
The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service (c…
-
Unscored —CVE-2003-0290 Public exploit
Memory leak in eServ 2.9x allows remote attackers to cause a denial of service (memory exhaustion) via a large number o…
-
Unscored —
SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows…
-
Unscored —CVE-2003-0277 Public exploit
Directory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to r…
-
Unscored —CVE-2003-0281 Public exploit
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase cod…
-
Unscored —
Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute ar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Neoteris Instant Virtual Extranet (IVE) 3.01 and earlier allows remote atta…
-
Unscored —
Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters be…
-
Unscored —
Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attack…