Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 7.5

    HIGH
    CVE-2004-1916

    Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func f... Read more

    Affected Products : lcdproc
    • EPSS Score: %8.03
    • Published: Apr. 08, 2004
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2004-1917

    Format string vulnerability in test_func_func in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable.... Read more

    Affected Products : lcdproc
    • EPSS Score: %4.94
    • Published: Apr. 08, 2004
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2004-1915

    Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments.... Read more

    Affected Products : lcdproc
    • EPSS Score: %27.82
    • Published: Apr. 08, 2004
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2004-1357

    The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their activities.... Read more

    Affected Products : solaris
    • EPSS Score: %4.98
    • Published: Apr. 07, 2004
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2004-1986

    Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the startdir parameter.... Read more

    Affected Products : php-nuke coppermine_photo_gallery
    • EPSS Score: %0.11
    • Published: Apr. 04, 2004
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2004-1890

    Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via the PORT mode.... Read more

    Affected Products : irix
    • EPSS Score: %0.74
    • Published: Apr. 02, 2004
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2004-1878

    LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a direct request to admin/user.pl preceded by // (double leading slash).... Read more

    Affected Products : linbox_officeserver
    • EPSS Score: %9.09
    • Published: Mar. 30, 2004
    • Modified: Apr. 03, 2025

  • 9.3

    HIGH
    CVE-2004-1875

    Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to testfile.html, (2) file parameter to erredit.html, (3) dns parameter to dnslook.html, (4) ... Read more

    Affected Products : cpanel
    • EPSS Score: %15.32
    • Published: Mar. 30, 2004
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2004-1876

    The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name.... Read more

    Affected Products : clamav
    • EPSS Score: %0.12
    • Published: Mar. 30, 2004
    • Modified: Apr. 03, 2025

  • 2.6

    LOW
    CVE-2004-1877

    The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently revea... Read more

    Affected Products : http_server application_server
    • EPSS Score: %0.82
    • Published: Mar. 30, 2004
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2004-0113

    Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.... Read more

    Affected Products : http_server
    • EPSS Score: %32.04
    • Published: Mar. 29, 2004
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2003-1006

    Buffer overflow in cd9660.util in Apple Mac OS X 10.0 through 10.3.2 and Apple Mac OS X Server 10.0 through 10.3.2 may allow local users to execute arbitrary code via a long command line parameter.... Read more

    Affected Products : mac_os_x mac_os_x_server
    • EPSS Score: %0.35
    • Published: Mar. 29, 2004
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2003-0828

    Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables.... Read more

    Affected Products : freesweep
    • EPSS Score: %0.08
    • Published: Mar. 29, 2004
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2003-1008

    Unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 allows local users to bypass the screen saver login window and write a text clipping to the desktop or another application.... Read more

    Affected Products : mac_os_x mac_os_x_server
    • EPSS Score: %0.07
    • Published: Mar. 29, 2004
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2003-0612

    Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.... Read more

    Affected Products : crafty
    • EPSS Score: %0.12
    • Published: Mar. 29, 2004
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2004-0160

    Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.... Read more

    Affected Products : synaesthesia
    • EPSS Score: %0.05
    • Published: Mar. 29, 2004
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2004-1870

    Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the (1) photo parameter to addfav.php, (2) photo parameter to comments.php, (3) credit parameter to comments.php, (4) cat par... Read more

    Affected Products : photopost_php_pro
    • EPSS Score: %0.78
    • Published: Mar. 29, 2004
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2003-0797

    Unknown vulnerability in rpc.mountd in SGI IRIX 6.5 through 6.5.22 allows remote attackers to cause a denial of service (process death) via unknown attack vectors.... Read more

    Affected Products : irix
    • EPSS Score: %0.91
    • Published: Mar. 29, 2004
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2003-1011

    Apple Mac OS X 10.0 through 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys when the system is booting, which crashes the init process and leaves the user in a root shell.... Read more

    Affected Products : mac_os_x
    • EPSS Score: %0.05
    • Published: Mar. 29, 2004
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2003-1007

    AppleFileServer (AFS) in Apple Mac OS X 10.2.8 and 10.3.2 does not properly handle certain malformed requests, with unknown impact.... Read more

    Affected Products : mac_os_x mac_os_x_server
    • EPSS Score: %0.50
    • Published: Mar. 29, 2004
    • Modified: Apr. 03, 2025
Showing 20 of 291274 Results