16 November 2005

191 results · Feed

• Unscored —
  CVE-2003-1251 Public exploit

  The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.ph…

  Nov 16, 2005
• Unscored —
  CVE-2003-1245 Public exploit

  index2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request where session_id is s…

  Nov 16, 2005
• Unscored —
  CVE-2003-1275 Public exploit EPSS 17%

  Pocket Internet Explorer (PIE) 3.0 allows remote attackers to cause a denial of service (crash) via a Javascript functi…

  Nov 16, 2005
• Unscored —
  CVE-2003-1277

  Cross-site scripting (XSS) vulnerabilities in Yet Another Bulletin Board (YaBB) 1.5.0 allow remote attackers to execute…

  Nov 16, 2005
• Unscored —
  CVE-2003-1262

  Buffer overflow in the http_fetch function of HTTP Fetcher 1.0.0 and 1.0.1 allows remote attackers to cause a denial of…

  Nov 16, 2005
• Unscored —
  CVE-2003-1267

  GuildFTPd 0.999 allows remote attackers to cause a denial of service (crash) via a GET request for MS-DOS device names …

  Nov 16, 2005
• Unscored —
  CVE-2003-1260 Public exploit

  Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.

  Nov 16, 2005
• Unscored —
  CVE-2003-1279

  S-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a symlink attack on (1) …

  Nov 16, 2005
• Unscored —
  CVE-2003-1240 Public exploit

  PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute arbitrary PHP code via a UR…

  Nov 16, 2005
• Unscored —
  CVE-2003-1265

  Netscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users select the 'Empty Trash'…

  Nov 16, 2005
• Unscored —
  CVE-2003-1270

  AN HTTP 1.41e allows remote attackers to cause a denial of service (borken pipe) via an HTTP request to aux.cgi with a …

  Nov 16, 2005
• Unscored —
  CVE-2003-1271 Public exploit

  Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute arbitrary web script or HT…

  Nov 16, 2005
• Unscored —
  CVE-2003-1272

  Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service (crash) and possibly execut…

  Nov 16, 2005
• Unscored —
  CVE-2003-1256 Public exploit

  aff_liste_langue.php in E-theni allows remote attackers to execute arbitrary PHP code by modifying the rep_include para…

  Nov 16, 2005
• Unscored —
  CVE-2003-1263 Public exploit

  ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, possibl…

  Nov 16, 2005
• Unscored —
  CVE-2003-1243 Public exploit

  Cross-site scripting vulnerability (XSS) in Sage 1.0 b3 allows remote attackers to insert arbitrary HTML or web script …

  Nov 16, 2005
• Unscored —
  CVE-2003-1235

  BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for tes…

  Nov 16, 2005
• Unscored —
  CVE-2003-1269

  AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a …

  Nov 16, 2005
• Unscored —
  CVE-2003-1264

  TFTP server in Longshine Wireless Access Point (WAP) LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, all…

  Nov 16, 2005
• Unscored —
  CVE-2003-1282

  IBM Net.Data allows remote attackers to obtain sensitive information such as path names, server names and possibly user…

  Nov 16, 2005
• Unscored —
  CVE-2003-1234

  Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of servi…

  Nov 16, 2005
• Unscored —
  CVE-2003-1254

  Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to execute arbitrary PHP code via (1) head.php, (2) apb_commo…

  Nov 16, 2005
• Unscored —
  CVE-2003-1237

  Cross-site scripting vulnerability (XSS) in WWWBoard 2.0A2.1 and earlier allows remote attackers to inject arbitrary HT…

  Nov 16, 2005
• Unscored —
  CVE-2003-1258

  activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrativ…

  Nov 16, 2005
• Unscored —
  CVE-2003-1248

  H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode an…

  Nov 16, 2005
• Unscored —
  CVE-2003-1249

  WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions.

  Nov 16, 2005
• Unscored —
  CVE-2003-1246

  NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to create a…

  Nov 16, 2005
• Unscored —
  CVE-2003-1278 Public exploit

  Cross-site scripting vulnerability (XSS) in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as othe…

  Nov 16, 2005
• Unscored —
  CVE-2003-1276

  Netfone.exe of NetTelephone 3.5.6 uses weak encryption for user PIN's and stores user account numbers in plaintext in t…

  Nov 16, 2005
• Unscored —
  CVE-2003-1257

  find_theni_home.php in E-theni allows remote attackers to obtain sensitive system information via a URL request which e…

  Nov 16, 2005
• Unscored —
  CVE-2003-1274

  Winamp 3.0 allows remote attackers to cause a denial of service (crash) via .b4s file with a file: argument to the Play…

  Nov 16, 2005