Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 5.0

    MEDIUM
    CVE-2003-0316

    Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, including an open relay for SMTP, which allows it to be abused by spammers.... Read more

    Affected Products : venturi_client
    • EPSS Score: %0.49
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0298

    The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large (1) literal and possibly (2) mailbox size values that cause either integer signedness errors o... Read more

    Affected Products : mozilla
    • EPSS Score: %0.95
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2003-0302

    The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.... Read more

    Affected Products : eudora
    • EPSS Score: %0.86
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2003-0365

    ICQLite 2003a creates the ICQ Lite directory with an ACE for "Full Control" privileges for Interactive Users, which allows local users to gain privileges as other users by replacing the executables with malicious programs.... Read more

    Affected Products : icqlite
    • EPSS Score: %0.17
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 6.8

    MEDIUM
    CVE-2003-0295

    Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability.... Read more

    Affected Products : vbulletin
    • EPSS Score: %0.42
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2003-0374

    Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373, aka "similar issues in other nasl functions as well as in libnessus."... Read more

    Affected Products : nessus
    • EPSS Score: %0.47
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 6.8

    MEDIUM
    CVE-2003-0278

    Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to insert arbitrary web script via the file parameter.... Read more

    Affected Products : happymall
    • EPSS Score: %0.57
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2003-0376

    Buffer overflow in Eudora 5.2.1 allows remote attackers to cause a denial of service (crash and failed restart) and possibly execute arbitrary code via an Attachment Converted argument with a large number of . (dot) characters.... Read more

    Affected Products : eudora
    • EPSS Score: %4.81
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 6.8

    MEDIUM
    CVE-2003-0287

    Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is ena... Read more

    Affected Products : movable_type
    • EPSS Score: %1.24
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0344

    Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.... Read more

    Affected Products : internet_explorer ie
    • EPSS Score: %74.31
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2003-0280

    Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.... Read more

    Affected Products : cmailserver
    • EPSS Score: %11.16
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 5.1

    MEDIUM
    CVE-2003-0275

    SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on a remote web server that contains the code.... Read more

    Affected Products : yabb
    • EPSS Score: %0.75
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2003-0301

    The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.... Read more

    Affected Products : outlook_express
    • EPSS Score: %4.28
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0296

    The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.... Read more

    Affected Products : evolution
    • EPSS Score: %0.95
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2003-0420

    Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool.... Read more

    Affected Products : mac_os_x_server
    • EPSS Score: %0.08
    • Published: Jun. 13, 2003
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2003-0306

    Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo parameter.... Read more

    Affected Products : windows_xp
    • EPSS Score: %2.48
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2003-0329

    CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to gain privileges.... Read more

    Affected Products : cesarftp
    • EPSS Score: %0.14
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2002-1564

    Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains script which is executed when a page is loaded, aka the "Script within Cookies Reading Cookies" vulnerability.... Read more

    Affected Products : internet_explorer
    • EPSS Score: %15.86
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2003-0304

    one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script.... Read more

    Affected Products : oneorzero_helpdesk
    • EPSS Score: %2.86
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0307

    Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" value into the email address field.... Read more

    Affected Products : poster
    • EPSS Score: %0.64
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
Showing 20 of 291750 Results