Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 7.5

    HIGH
    CVE-2003-0344

    Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.... Read more

    Affected Products : internet_explorer ie
    • EPSS Score: %74.31
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2003-0280

    Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.... Read more

    Affected Products : cmailserver
    • EPSS Score: %11.16
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2003-0371

    Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP banner.... Read more

    Affected Products : prishtina_ftp
    • EPSS Score: %4.60
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2003-0374

    Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373, aka "similar issues in other nasl functions as well as in libnessus."... Read more

    Affected Products : nessus
    • EPSS Score: %0.47
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025
  • 6.8

    MEDIUM
    CVE-2003-0278

    Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to insert arbitrary web script via the file parameter.... Read more

    Affected Products : happymall
    • EPSS Score: %0.57
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2003-0302

    The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.... Read more

    Affected Products : eudora
    • EPSS Score: %0.86
    • Published: Jun. 16, 2003
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2003-0420

    Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool.... Read more

    Affected Products : mac_os_x_server
    • EPSS Score: %0.08
    • Published: Jun. 13, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2003-0241

    FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is render... Read more

    Affected Products : goldmine
    • EPSS Score: %2.72
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2003-0358

    Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.... Read more

    Affected Products : debian_linux nethack falconseye
    • EPSS Score: %0.23
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2002-1463

    Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers (ISN), which allows remote attackers t... Read more

    • EPSS Score: %11.01
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2003-0323

    Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via responses that are not properly fed to the my_strcat function by (1) ctcp_buffer, (2) cannot_join_... Read more

    Affected Products : ircii
    • EPSS Score: %1.01
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2003-0189

    The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid userna... Read more

    Affected Products : http_server
    • EPSS Score: %19.41
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2003-0326

    Integer overflow in parse_decode_path() of slocate may allow attackers to execute arbitrary code via a LOCATE_PATH with a large number of ":" (colon) characters, whose count is used in a call to malloc.... Read more

    Affected Products : slocate
    • EPSS Score: %0.10
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2003-0309

    Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file... Read more

    Affected Products : internet_explorer
    • EPSS Score: %15.05
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2003-0242

    IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitly allowed by the policies.... Read more

    Affected Products : mac_os_x
    • EPSS Score: %1.40
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2002-1454

    MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message.... Read more

    Affected Products : mywebserver
    • EPSS Score: %0.66
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2002-1462

    details2.php in OrganicPHP PHP-affiliate 1.0, and possibly later versions, allows remote attackers to modify information of other users by modifying certain hidden form fields.... Read more

    Affected Products : php-affiliate
    • EPSS Score: %1.15
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2002-1461

    Web Shop Manager 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box.... Read more

    Affected Products : web_shop_manager
    • EPSS Score: %2.14
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2002-1458

    Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, (3) Subject and (4) Body.... Read more

    Affected Products : l-forum
    • EPSS Score: %0.87
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2003-0225

    The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumpti... Read more

    • EPSS Score: %29.22
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
Showing 20 of 292522 Results