Latest CVE Feed
-
6.8
MEDIUMCVE-2003-0521
Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the (1) Error Log or ... Read more
Affected Products : cpanel- EPSS Score: %0.42
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0588
admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.... Read more
Affected Products : digi-news- EPSS Score: %2.56
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-0350
The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 (ListView) does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manage... Read more
Affected Products : windows_2000- EPSS Score: %0.88
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-0440
The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files.... Read more
- EPSS Score: %0.06
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0522
Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp.... Read more
Affected Products : productcart- EPSS Score: %0.46
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0520
Trillian 1.0 Pro and 0.74 Freeware allows remote attackers to cause a denial of service (crash) via a TypingUser message in which the "TypingUser" string has been modified.... Read more
Affected Products : trillian- EPSS Score: %0.66
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
6.8
MEDIUMCVE-2003-0526
Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in... Read more
Affected Products : isa_server- EPSS Score: %52.16
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0555
ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a "%x" filename, possibly triggering a format string vulnerability.... Read more
Affected Products : imagemagick- EPSS Score: %0.95
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0553
Buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment with a long filename.... Read more
Affected Products : navigator- EPSS Score: %3.28
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
6.2
MEDIUMCVE-2003-0524
Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qt_plugins_3.0rc temporary file in the .qt directory.... Read more
Affected Products : knoppix- EPSS Score: %0.06
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0559
mainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by modifying the MAIN_PATH parameter to reference a URL on a remote web server that contains the code.... Read more
Affected Products : phpforum- EPSS Score: %0.75
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.1
HIGHCVE-2003-0590
Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon (image_subject) field.... Read more
Affected Products : splatt_forum- EPSS Score: %1.25
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-0458
Unknown vulnerability in HP NonStop Server D40.00 through D48.03, and G01.00 through G06.20, allows local users to gain additional privileges.... Read more
Affected Products : nonstop_seeview_server_gateway- EPSS Score: %0.09
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1410
Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via... Read more
Affected Products : internet_explorer- EPSS Score: %49.55
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-0579
uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by providing a pathname that is under control of the user.... Read more
Affected Products : u2_universe- EPSS Score: %0.28
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-0574
Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables, a different vulnerability than CVE-2001-0797 and CVE-1... Read more
Affected Products : irix- EPSS Score: %0.05
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0585
SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authentication and execute arbitrary SQL code via the (1) user or (2) pass parameters.... Read more
Affected Products : estore- EPSS Score: %1.24
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-0518
The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, possibly triggering a buffer overflow.... Read more
- EPSS Score: %0.09
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
6.9
MEDIUMCVE-2003-0587
Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x allows remote authenticated users to execute arbitrary web script and gain administrative access via the "displayed name" attribute of the "ubber" cookie.... Read more
Affected Products : ultimate_bulletin_board- EPSS Score: %0.14
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0586
Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php.... Read more
Affected Products : estore- EPSS Score: %4.44
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025