Latest CVE Feed
-
7.5
HIGHCVE-2003-0946
Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address ... Read more
Affected Products : clamav- EPSS Score: %1.96
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0944
Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI.... Read more
Affected Products : sap_db- EPSS Score: %3.22
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0822
Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.... Read more
Affected Products : windows_2000 windows_xp sharepoint_team_services frontpage_server_extensions iis- EPSS Score: %89.14
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-0932
Buffer overflow in omega-rpg 0.90 allows local users to execute arbitrary code via a long (1) command line or (2) environment variable.... Read more
Affected Products : omega-rpg- EPSS Score: %0.09
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0972
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.... Read more
Affected Products : screen- EPSS Score: %1.21
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0821
Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.... Read more
- EPSS Score: %10.98
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0960
OpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the serial, which could cause OpenCA to accept revoked or expired certificates.... Read more
Affected Products : openca- EPSS Score: %0.26
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0820
Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.... Read more
- EPSS Score: %22.03
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-1056
The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.... Read more
- EPSS Score: %0.05
- Published: Dec. 11, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-1057
Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code.... Read more
- EPSS Score: %0.06
- Published: Dec. 08, 2003
- Modified: Apr. 03, 2025
-
3.7
LOWCVE-2003-1058
The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or overwrite arbitrary files on the system, probably via a symlink attack on tempor... Read more
- EPSS Score: %0.08
- Published: Dec. 03, 2003
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2003-0624
Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter.... Read more
Affected Products : weblogic_server- EPSS Score: %3.46
- Published: Dec. 01, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-0834
Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.... Read more
- EPSS Score: %0.63
- Published: Dec. 01, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0622
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service (hang) via pathname arguments that contain MS-DOS device names such as CON and AUX.... Read more
- EPSS Score: %0.78
- Published: Dec. 01, 2003
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2003-0623
Cross-site scripting (XSS) vulnerability in the Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to inject arbitrary web script via the INIFILE argument.... Read more
- EPSS Score: %0.54
- Published: Dec. 01, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0621
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.... Read more
- EPSS Score: %6.82
- Published: Dec. 01, 2003
- Modified: Apr. 03, 2025
-
6.4
MEDIUMCVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.... Read more
- EPSS Score: %0.86
- Published: Dec. 01, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0927
Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SOCKS dissector.... Read more
- EPSS Score: %2.43
- Published: Dec. 01, 2003
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-0934
Symbol Access Portable Data Terminal (PDT) 8100 does not hide the default WEP keys if they are not changed, which could allow attackers to retrieve the keys and gain access to the wireless network.... Read more
Affected Products : pdt- EPSS Score: %0.07
- Published: Dec. 01, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0925
Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed GTP MSISDN string.... Read more
- EPSS Score: %2.75
- Published: Dec. 01, 2003
- Modified: Apr. 03, 2025