Archive
July 2003
Vulnerabilities first published in this month (UTC), newest first.
90 results · Feed
-
Unscored —
Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via …
-
Unscored —
Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of "user" requests to th…
-
Unscored —
ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary co…
-
Unscored —
mainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code b…
-
Unscored —
The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as oppos…
-
Unscored —
Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response…
-
Unscored —
VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folde…
-
Unscored —
NeoModus Direct Connect 1.0 build 9, and possibly other versions, allows remote attackers to cause a denial of service …
-
Unscored —CVE-2003-0252 EPSS 16%
Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote a…
-
Unscored —CVE-2003-0557 Public exploit
SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to …
-
Unscored —CVE-2003-0560 Public exploit
SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the …
-
Unscored —
Buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows remote attackers to exec…
-
Unscored —CVE-2003-0561 Public exploit
Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP ban…
-
Unscored —CVE-2003-0521 Public exploit
Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly …
-
Unscored —
skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates te…
-
Unscored —CVE-2003-0496 Public exploit
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling th…
-
Unscored —
SQL injection vulnerabilities in the (1) PostgreSQL or (2) MySQL authentication modules for teapop 0.3.5 and earlier al…
-
Unscored —CVE-2003-0519 EPSS 11%
Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denia…
-
Unscored —CVE-2003-0345 EPSS 35%
Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial …
-
Unscored —
The liece Emacs IRC client 2.0+0.20030527 and earlier creates temporary files insecurely, which could allow local users…
-
Unscored —
Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of pe…
-
Unscored —
The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 (ListView) does not …
-
Unscored —
Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the ad…
-
Unscored —
Trillian 1.0 Pro and 0.74 Freeware allows remote attackers to cause a denial of service (crash) via a TypingUser messag…
-
Unscored —CVE-2003-0536 Public exploit
Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory…
-
Unscored —
The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to ov…
-
Unscored —
Buffer overflow in xbl 1.0k and earlier allows local users to gain privileges via a long -display command line option.
-
Unscored —
The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the…
-
Unscored —
The mailcap file for mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, which allows r…
-
Unscored —
Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qt_plugins_3.0rc …
-
Unscored —
faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files.
-
Unscored —
cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote…
-
Unscored —
The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a de…
-
Unscored —
Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by…
-
Unscored —CVE-2003-0523 Public exploit
Cross-site scripting (XSS) vulnerability in msg.asp for certain versions of ProductCart allow remote attackers to execu…
-
Unscored —CVE-2003-0454 Public exploit
Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environmen…
-
Unscored —
Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allow…
-
Unscored —
The imagemagick libmagick library 5.5 and earlier creates temporary files insecurely, which allows local users to creat…
-
Unscored —CVE-2003-0508 Public exploit
Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5.0.7 and earlier allows remote at…
-
Unscored —CVE-2003-0507 EPSS 27%
Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of…