Latest CVE Feed
-
5.0
MEDIUMCVE-2003-1191
chatbox.php in e107 0.554 and 0.603 allows remote attackers to cause a denial of service (pages fail to load) via HTML in the Name field, which prevents the main.php form from being loaded.... Read more
Affected Products : e107- EPSS Score: %5.22
- Published: Oct. 29, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-1186
Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header.... Read more
Affected Products : simplewebserver- EPSS Score: %5.51
- Published: Oct. 29, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-1189
Unknown vulnerability in Nokia IPSO 3.7, configured as IP Clusters, allows remote attackers to cause a denial of service via unknown attack vectors.... Read more
Affected Products : ipso- EPSS Score: %0.91
- Published: Oct. 29, 2003
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-1183
The WebCache component in Oracle Files 9.0.3.1.0, 9.0.3.2.0, and 9.0.3.3.0 of Oracle Collaboration Suite Release 1 caches files despite the cacheability rules imposed by Oracle Files, which allows local users to gain access.... Read more
Affected Products : oracle_files- EPSS Score: %0.27
- Published: Oct. 28, 2003
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2003-1151
Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitrary web script or HTML via the URL, which is displayed on a "404 Not Found" error page.... Read more
Affected Products : netfile_ftp_web_server- EPSS Score: %1.12
- Published: Oct. 28, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-1140
Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the configuration file.... Read more
Affected Products : musicqueue- EPSS Score: %1.44
- Published: Oct. 27, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-1137
Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk (*) wildcard character.... Read more
Affected Products : sh-httpd- EPSS Score: %6.47
- Published: Oct. 27, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-1138
The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash ... Read more
- EPSS Score: %3.18
- Published: Oct. 27, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-1150
Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors.... Read more
- EPSS Score: %2.28
- Published: Oct. 27, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-1139
Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file.... Read more
Affected Products : musicqueue- EPSS Score: %2.46
- Published: Oct. 27, 2003
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2003-1149
Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page.... Read more
Affected Products : norton_internet_security- EPSS Score: %2.00
- Published: Oct. 27, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-1060
The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS panic) via certain invalid UFS requests, which triggers a null dereference.... Read more
- EPSS Score: %0.74
- Published: Oct. 27, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-1148
Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allow remote attackers to execute arbitrary PHP code via a URL in the lvc_include_... Read more
Affected Products : les_visiteurs- EPSS Score: %8.38
- Published: Oct. 25, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-1181
Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invokes the phpinfo() function.... Read more
Affected Products : advanced_poll- EPSS Score: %7.54
- Published: Oct. 25, 2003
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2003-1136
Cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers to inject arbitrary web script or HTML via (1) HTML in a posted message or (2) Javascript in an onmouseover attribute in an e-mail address or URL.... Read more
Affected Products : chi_kien_uong_guestbook- EPSS Score: %1.89
- Published: Oct. 23, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0664
Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.... Read more
- EPSS Score: %7.25
- Published: Oct. 20, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0734
Unknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based authentication is being used, allows users to bypass host-based access restrictions and log onto the system.... Read more
Affected Products : pam_ldap- EPSS Score: %0.42
- Published: Oct. 20, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0708
Format string vulnerability in LinuxNode (node) before 0.3.2 may allow attackers to cause a denial of service or execute arbitrary code.... Read more
Affected Products : linuxnode- EPSS Score: %0.91
- Published: Oct. 20, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0737
The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to obtain the full pathname of phpWebSite via an invalid year, which generates an error from localtime() in TimeZone.php of the Pear library.... Read more
Affected Products : phpwebsite- EPSS Score: %0.44
- Published: Oct. 20, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0725
Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code.... Read more
- EPSS Score: %57.43
- Published: Oct. 20, 2003
- Modified: Apr. 03, 2025