Skip to content
OpenAdvisories

Archive

July 2003

Vulnerabilities first published in this month (UTC), newest first.

← June 2003 2003 / July August 2003 →
  1. 1 
  2. 2 
  3. 3 
  4. 415
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 1022
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 1512
  16. 16 
  17. 179
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 2526
  26. 26 
  27. 27 
  28. 28 
  29. 296
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

90 results · Feed

  • Unscored —
    CVE-2003-0604 EPSS 13%

    Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process …

  • Unscored —
    CVE-2003-0602

    Multiple cross-site scripting vulnerabilities (XSS) in Bugzilla 2.16.x before 2.16.3 and 2.17.x before 2.17.4 allow rem…

  • Unscored —
    CVE-2003-0511 Public exploit

    The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attac…

  • Unscored —
    CVE-2003-0603

    Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to overwrite arbitrary fil…

  • Unscored —
    CVE-2003-0605 Public exploit EPSS 59%

    The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and lo…

  • Unscored —
    CVE-2003-0512

    Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when an invalid us…

  • Unscored —
    CVE-2003-0562 Public exploit EPSS 14%

    Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2003-0425

    Directory traversal vulnerability in Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to…

  • Unscored —
    CVE-2003-0232 Public exploit

    Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local …

  • Unscored —
    CVE-2003-0596

    FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if t…

    fdclone Debian
  • Unscored —
    CVE-2003-0599

    Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC and versions before 0.9.…

  • Unscored —
    CVE-2003-0597

    Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges.

  • Unscored —
    CVE-2003-0421

    Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) vi…

  • Unscored —
    CVE-2003-0424

    Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts b…

  • Unscored —
    CVE-2003-0567 Public exploit EPSS 17%

    Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a …

  • Unscored —
    CVE-2003-0502

    Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) vi…

  • Unscored —
    CVE-2003-0581

    X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute a…

    xfstt Debian
  • Unscored —
    CVE-2003-0426

    The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Se…

  • Unscored —
    CVE-2003-0551

    The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to…

  • Unscored —
    CVE-2003-0464

    The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to…

  • Unscored —
    CVE-2003-0552

    Linux 2.4.x allows remote attackers to spoof the bridge Forwarding table via forged packets whose source addresses are …

  • Unscored —
    CVE-2003-0595 Public exploit

    Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a lo…

  • Unscored —
    CVE-2003-0525

    The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which a…

  • Unscored —
    CVE-2003-0461

    /proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow l…

  • Unscored —
    CVE-2003-0423

    parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source c…

  • Unscored —
    CVE-2003-0230

    Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authe…

  • Unscored —
    CVE-2003-0346 EPSS 33%

    Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute a…

  • Unscored —
    CVE-2003-0550

    The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to …

  • Unscored —
    CVE-2003-0462 Public exploit

    A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/pro…

  • Unscored —
    CVE-2003-0460 EPSS 13%

    The rotatelogs program on Apache before 1.3.28, for Windows and OS/2 systems, does not properly ignore certain control …

  • Unscored —
    CVE-2003-0231 Public exploit EPSS 36%

    Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash o…

  • Unscored —
    CVE-2003-0422

    Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) vi…

  • Unscored —
    CVE-2001-1410 Public exploit EPSS 51%

    Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.create…

  • Unscored —
    CVE-2003-0579 Public exploit

    uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and ex…

  • Unscored —
    CVE-2003-0526 Public exploit EPSS 22%

    Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remot…

  • Unscored —
    CVE-2003-0458

    Unknown vulnerability in HP NonStop Server D40.00 through D48.03, and G01.00 through G06.20, allows local users to gain…

  • Unscored —
    CVE-2003-0578

    cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users …

  • Unscored —
    CVE-2003-0352 Public exploit EPSS 98%

    Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remot…

  • Unscored —
    CVE-2003-0142

    Adobe Acrobat Reader (acroread) 6, under certain circumstances when running with the "Certified plug-ins only" option d…

  • Unscored —
    CVE-2003-0577

    mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file w…

    mp3gain mpg123 Debian