Latest CVE Feed
-
4.6
MEDIUMCVE-2003-1008
Unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 allows local users to bypass the screen saver login window and write a text clipping to the desktop or another application.... Read more
- EPSS Score: %0.07
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-1006
Buffer overflow in cd9660.util in Apple Mac OS X 10.0 through 10.3.2 and Apple Mac OS X Server 10.0 through 10.3.2 may allow local users to execute arbitrary code via a long command line parameter.... Read more
- EPSS Score: %0.35
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-0828
Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables.... Read more
Affected Products : freesweep- EPSS Score: %0.08
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-1018
Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors.... Read more
Affected Products : aix- EPSS Score: %0.05
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2004-0158
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.... Read more
Affected Products : lbreakout2- EPSS Score: %0.26
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-0612
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.... Read more
Affected Products : crafty- EPSS Score: %0.12
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-0194
Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code via a PDF document with XML Forms Data Format (XFDF) data.... Read more
Affected Products : acrobat_reader- EPSS Score: %18.00
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0796
Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled.... Read more
Affected Products : irix- EPSS Score: %0.74
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2004-1874
Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2) billing.asp in A-CART Pro and A-CART 2.0 allow remote attackers to inject arbitrary web script or HTML via the user information forms.... Read more
Affected Products : a-cart- EPSS Score: %0.44
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0601
Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved.... Read more
Affected Products : mac_os_x_server- EPSS Score: %0.72
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0170
Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privileges via unknown attack vectors.... Read more
Affected Products : aix- EPSS Score: %1.18
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-0607
Buffer overflow in xconq 7.4.1 allows local users to become part of the "games" group via the (1) USER or (2) DISPLAY environment variables.... Read more
Affected Products : xconq- EPSS Score: %0.08
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2004-1872
Cross-site scripting (XSS) vulnerability in WebCT Campus Edition 4.1.1.5 allows remote attackers to inject arbitrary web script or HTML via the @import URL function in a CSS style tag.... Read more
Affected Products : webct- EPSS Score: %0.42
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-0113
Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.... Read more
Affected Products : http_server- EPSS Score: %32.04
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0797
Unknown vulnerability in rpc.mountd in SGI IRIX 6.5 through 6.5.22 allows remote attackers to cause a denial of service (process death) via unknown attack vectors.... Read more
Affected Products : irix- EPSS Score: %0.91
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-1011
Apple Mac OS X 10.0 through 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys when the system is booting, which crashes the init process and leaves the user in a root shell.... Read more
Affected Products : mac_os_x- EPSS Score: %0.05
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-1007
AppleFileServer (AFS) in Apple Mac OS X 10.2.8 and 10.3.2 does not properly handle certain malformed requests, with unknown impact.... Read more
- EPSS Score: %0.50
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-1870
Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the (1) photo parameter to addfav.php, (2) photo parameter to comments.php, (3) credit parameter to comments.php, (4) cat par... Read more
Affected Products : photopost_php_pro- EPSS Score: %0.78
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2004-1871
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ppuser, (2) password, (3) stype, (4) perpage, (5) sort, (6) page, (7) si, or (8) cat param... Read more
Affected Products : photopost_php_pro- EPSS Score: %10.68
- Published: Mar. 29, 2004
- Modified: Apr. 03, 2025
-
4.8
MEDIUMCVE-2004-1865
Cross-site scripting (XSS) vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name ($blogname). NOTE: if administrators are normally allow... Read more
Affected Products : bblog- EPSS Score: %0.42
- Published: Mar. 26, 2004
- Modified: Apr. 03, 2025