Latest CVE Feed
-
4.6
MEDIUMCVE-2003-0177
SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently.... Read more
Affected Products : irix- EPSS Score: %0.07
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0142
Adobe Acrobat Reader (acroread) 6, under certain circumstances when running with the "Certified plug-ins only" option disabled, loads plug-ins with signatures used for older versions of Acrobat, which can allow attackers to cause Acrobat to enter Certifie... Read more
Affected Products : acrobat_reader- EPSS Score: %4.60
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0519
Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denial of service (freeze) via a URL to C:\aux (MS-DOS device name) and possibly other devices.... Read more
Affected Products : internet_explorer- EPSS Score: %7.08
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
6.8
MEDIUMCVE-2003-0521
Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the (1) Error Log or ... Read more
Affected Products : cpanel- EPSS Score: %0.42
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0558
Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request.... Read more
Affected Products : leapftp- EPSS Score: %75.78
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0176
The Name Service Daemon (nsd), when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via a UDP port scan.... Read more
Affected Products : irix- EPSS Score: %0.66
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0588
admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.... Read more
Affected Products : digi-news- EPSS Score: %2.56
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0559
mainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by modifying the MAIN_PATH parameter to reference a URL on a remote web server that contains the code.... Read more
Affected Products : phpforum- EPSS Score: %0.75
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0555
ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a "%x" filename, possibly triggering a format string vulnerability.... Read more
Affected Products : imagemagick- EPSS Score: %0.95
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0553
Buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment with a long filename.... Read more
Affected Products : navigator- EPSS Score: %3.28
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0352
Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.... Read more
- EPSS Score: %89.81
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
3.6
LOWCVE-2003-0536
Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. (dot dot) sequences in the (1) template or (2) lng paramete... Read more
Affected Products : phpsysinfo- EPSS Score: %0.74
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0573
The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sanity checking, with unknown impact.... Read more
Affected Products : irix- EPSS Score: %0.69
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0581
X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a (1) FS_QueryXExtents8 or (2) FS_QueryXBitmaps8 packet, and possibly other types of packets, with a large num_ranges ... Read more
Affected Products : xfstt- EPSS Score: %1.82
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0522
Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp.... Read more
Affected Products : productcart- EPSS Score: %0.46
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0572
Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service (memory consumption).... Read more
Affected Products : irix- EPSS Score: %0.54
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-0583
Buffer overflow in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via a long command line argument.... Read more
Affected Products : bru- EPSS Score: %0.05
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0345
Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required.... Read more
- EPSS Score: %46.22
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
7.1
HIGHCVE-2003-0590
Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon (image_subject) field.... Read more
Affected Products : splatt_forum- EPSS Score: %1.25
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025
-
6.9
MEDIUMCVE-2003-0587
Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x allows remote authenticated users to execute arbitrary web script and gain administrative access via the "displayed name" attribute of the "ubber" cookie.... Read more
Affected Products : ultimate_bulletin_board- EPSS Score: %0.14
- Published: Aug. 18, 2003
- Modified: Apr. 03, 2025