Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 7.5

    HIGH
    CVE-2004-0396

    Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.... Read more

    Affected Products : cvs
    • EPSS Score: %86.79
    • Published: Jun. 14, 2004
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2004-0392

    racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" f... Read more

    Affected Products : racoon
    • EPSS Score: %0.93
    • Published: Jun. 14, 2004
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2002-1580

    Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.... Read more

    Affected Products : cyrus_imap_server
    • EPSS Score: %48.54
    • Published: Jun. 14, 2004
    • Modified: Apr. 03, 2025

  • 5.1

    MEDIUM
    CVE-2004-0199

    Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvd... Read more

    Affected Products : windows_2003_server windows_xp
    • EPSS Score: %39.02
    • Published: Jun. 14, 2004
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-1041

    Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does ... Read more

    Affected Products : internet_explorer ie
    • EPSS Score: %70.95
    • Published: Jun. 14, 2004
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2004-0154

    rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.... Read more

    Affected Products : nfs-utils
    • EPSS Score: %1.04
    • Published: Jun. 14, 2004
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2004-0050

    Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others.... Read more

    Affected Products : ultraseek
    • EPSS Score: %0.36
    • Published: Jun. 14, 2004
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2004-0038

    McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81.... Read more

    Affected Products : epolicy_orchestrator
    • EPSS Score: %1.78
    • Published: Jun. 14, 2004
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2004-0117

    Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code.... Read more

    • EPSS Score: %41.60
    • Published: Jun. 01, 2004
    • Modified: Apr. 03, 2025

  • 2.1

    LOW
    CVE-2004-0133

    The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device.... Read more

    Affected Products : linux_kernel
    • EPSS Score: %0.06
    • Published: Jun. 01, 2004
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2004-0182

    Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email message with an empty subject field.... Read more

    Affected Products : mailman
    • EPSS Score: %0.57
    • Published: Jun. 01, 2004
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2004-0197

    Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query.... Read more

    Affected Products : jet
    • EPSS Score: %39.54
    • Published: Jun. 01, 2004
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0719

    Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote ... Read more

    • EPSS Score: %70.97
    • Published: Jun. 01, 2004
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2003-0909

    Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability."... Read more

    Affected Products : windows_xp
    • EPSS Score: %14.12
    • Published: Jun. 01, 2004
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2003-0908

    The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI,... Read more

    Affected Products : windows_2000
    • EPSS Score: %4.32
    • Published: Jun. 01, 2004
    • Modified: Apr. 03, 2025

  • 5.1

    MEDIUM
    CVE-2003-0907

    Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.... Read more

    Affected Products : windows_server_2003 windows_xp
    • EPSS Score: %42.34
    • Published: Jun. 01, 2004
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0806

    Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code.... Read more

    Affected Products : windows_2000 windows_xp windows_nt
    • EPSS Score: %49.10
    • Published: Jun. 01, 2004
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2004-0119

    The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from null dereference) or execute arbitrary code via a crafted SPNEGO NegTokenInit r... Read more

    • EPSS Score: %39.70
    • Published: Jun. 01, 2004
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2004-0118

    The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.... Read more

    Affected Products : windows_2000 windows_nt
    • EPSS Score: %12.67
    • Published: Jun. 01, 2004
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2004-0391

    Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration.... Read more

    • EPSS Score: %0.62
    • Published: Jun. 01, 2004
    • Modified: Apr. 03, 2025
Showing 20 of 291551 Results