Archive
July 2003
Vulnerabilities first published in this month (UTC), newest first.
27 results · Clear filters · Feed
-
Unscored —CVE-2003-0511 Public exploit
The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attac…
-
Unscored —
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and lo…
-
Unscored —
Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denia…
-
Unscored —CVE-2003-0232 Public exploit
Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local …
-
Unscored —
Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a …
-
Unscored —CVE-2003-0595 Public exploit
Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a lo…
-
Unscored —CVE-2003-0462 Public exploit
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/pro…
-
Unscored —
Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash o…
-
Unscored —
Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.create…
-
Unscored —CVE-2003-0579 Public exploit
uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and ex…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remot…
-
Unscored —
Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remot…
-
Unscored —
Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response…
-
Unscored —CVE-2003-0557 Public exploit
SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to …
-
Unscored —CVE-2003-0560 Public exploit
SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the …
-
Unscored —CVE-2003-0561 Public exploit
Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP ban…
-
Unscored —CVE-2003-0521 Public exploit
Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly …
-
Unscored —CVE-2003-0496 Public exploit
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling th…
-
Unscored —CVE-2003-0536 Public exploit
Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory…
-
Unscored —CVE-2003-0523 Public exploit
Cross-site scripting (XSS) vulnerability in msg.asp for certain versions of ProductCart allow remote attackers to execu…
-
Unscored —CVE-2003-0454 Public exploit
Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environmen…
-
Unscored —CVE-2003-0508 Public exploit
Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5.0.7 and earlier allows remote at…
-
Unscored —
SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allo…
-
Unscored —CVE-2003-0509 Public exploit
SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication inform…
-
Unscored —CVE-2003-0497 Public exploit
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privi…
-
Unscored —CVE-2003-0501 Public exploit
The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/se…
-
Unscored —CVE-2003-0510 Public exploit
Format string vulnerability in ezbounce 1.0 through 1.50 allows remote attackers to execute arbitrary code via the "ses…