Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 7.5

    HIGH
    CVE-2003-0682

    "Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695.... Read more

    Affected Products : openssh
    • EPSS Score: %0.42
    • Published: Oct. 06, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0805

    Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type.... Read more

    Affected Products : gopherd
    • EPSS Score: %5.56
    • Published: Oct. 06, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0692

    KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.... Read more

    Affected Products : kde
    • EPSS Score: %1.21
    • Published: Oct. 06, 2003
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2003-0802

    Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical path of the NED server, via a "retrieve" action with a location parameter of . (dot).... Read more

    Affected Products : electronic_documentation
    • EPSS Score: %2.27
    • Published: Oct. 06, 2003
    • Modified: Apr. 03, 2025

  • 6.8

    MEDIUM
    CVE-2002-1567

    Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.... Read more

    Affected Products : tomcat
    • EPSS Score: %48.22
    • Published: Oct. 06, 2003
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2003-0690

    KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5... Read more

    Affected Products : kde
    • EPSS Score: %2.08
    • Published: Oct. 06, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0826

    lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer ove... Read more

    Affected Products : lsh
    • EPSS Score: %27.29
    • Published: Oct. 06, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0695

    Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vu... Read more

    Affected Products : openssh
    • EPSS Score: %1.17
    • Published: Oct. 06, 2003
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2003-0759

    Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long command line argument.... Read more

    Affected Products : db2_universal_database
    • EPSS Score: %0.16
    • Published: Oct. 06, 2003
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2003-0697

    Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service (crash) or gain root privileges.... Read more

    Affected Products : aix
    • EPSS Score: %0.05
    • Published: Oct. 06, 2003
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2003-1053

    Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) -KCONV command line option or (2) XSHISENLIB environment variable.... Read more

    Affected Products : xshisen
    • EPSS Score: %0.24
    • Published: Oct. 03, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0770

    FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.... Read more

    Affected Products : ikonboard
    • EPSS Score: %10.91
    • Published: Sep. 22, 2003
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2003-0771

    Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does.... Read more

    Affected Products : apache_gallery
    • EPSS Score: %0.09
    • Published: Sep. 22, 2003
    • Modified: Apr. 03, 2025

  • 6.8

    MEDIUM
    CVE-2003-0768

    Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the beginning of a tag name.... Read more

    Affected Products : asp.net
    • EPSS Score: %17.17
    • Published: Sep. 22, 2003
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2003-0693

    A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-200... Read more

    Affected Products : openssh
    • EPSS Score: %32.68
    • Published: Sep. 22, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0776

    saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.... Read more

    Affected Products : sane sane-backend
    • EPSS Score: %0.74
    • Published: Sep. 22, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0774

    saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service (segmentation fault) when invalid memory is accessed.... Read more

    Affected Products : sane sane-backend
    • EPSS Score: %1.50
    • Published: Sep. 22, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0779

    SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string.... Read more

    Affected Products : asterisk
    • EPSS Score: %0.03
    • Published: Sep. 22, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0772

    Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments.... Read more

    Affected Products : ws_ftp_server ws_ftp_server
    • EPSS Score: %83.20
    • Published: Sep. 22, 2003
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2003-0722

    The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.... Read more

    Affected Products : solaris
    • EPSS Score: %89.40
    • Published: Sep. 22, 2003
    • Modified: Apr. 03, 2025
Showing 20 of 291570 Results