Archive
May 2003
Vulnerabilities first published in this month (UTC), newest first.
121 results · Feed
-
Unscored —
Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to …
-
Unscored —
Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbit…
-
Unscored —CVE-2003-0283 Public exploit
Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2003-0289 Public exploit
Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows…
-
Unscored —
The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a f…
-
Unscored —
Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary fi…
-
Unscored —CVE-2003-0278 Public exploit
Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attacke…
-
Unscored —
IBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1) promiscuous_relay, (2…
-
Unscored —
SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to …
-
Unscored —
Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument.
-
Unscored —CVE-2003-0243 Public exploit
Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in th…
-
Unscored —CVE-2003-0274 Public exploit
Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long…
-
Unscored —
admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cook…
-
Unscored —
The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows rem…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT) 1.0 through 1.0.7 allows remote …
-
Unscored —
Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows …
-
Unscored —
The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a …
-
Unscored —
Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and po…
-
Unscored —
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to c…
-
Unscored —CVE-2003-0269 Public exploit
Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable.
-
Unscored —
SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to …
-
Unscored —CVE-2003-0265 Public exploit
Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initi…
-
Unscored —
fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges.
-
Unscored —CVE-2003-0262 Public exploit
leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges…
-
Unscored —
ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling Sh…
-
Unscored —
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to c…
-
Unscored —
Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbit…
-
Unscored —
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over …
-
Unscored —
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO ar…
-
Unscored —
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of sof…
-
Unscored —
Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary co…
-
Unscored —
Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbit…
-
Unscored —
icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of servi…
-
Unscored —
The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs a…
-
Unscored —
The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consump…
-
Unscored —CVE-2003-0118 Public exploit
SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 …
-
Unscored —CVE-2003-0115 EPSS 12%
Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check parameters that are passed during third party ren…
-
Unscored —CVE-2003-0117 Public exploit
Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows at…
-
Unscored —CVE-2003-0233 EPSS 19%
Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arb…