Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 7.5

    HIGH
    CVE-2002-1458

    Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, (3) Subject and (4) Body.... Read more

    Affected Products : l-forum
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2003-0303

    SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter.... Read more

    Affected Products : oneorzero_helpdesk
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2003-0329

    CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to gain privileges.... Read more

    Affected Products : cesarftp
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0328

    EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect lengt... Read more

    Affected Products : linux epic4
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2003-0194

    tcpdump does not properly drop privileges to the pcap user when starting up.... Read more

    Affected Products : linux tcpdump
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2003-0306

    Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo parameter.... Read more

    Affected Products : windows_xp
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0320

    header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin parameter to "1" and modifying the admin_root parameter to point to a URL that contains a Trojan horse header.inc.php script.... Read more

    Affected Products : ttcms
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0321

    Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled... Read more

    Affected Products : bitchx
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2003-0362

    Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV) in rgpsp via long command lines.... Read more

    Affected Products : debian_linux
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0357

    Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) Mount and (2) PPP dissectors.... Read more

    Affected Products : ethereal
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0241

    FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is render... Read more

    Affected Products : goldmine
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2003-0305

    The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denial of service (crash) via malformed RTR packets to port 1967.... Read more

    Affected Products : ios
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 7.6

    HIGH
    CVE-2003-0332

    The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which allows remote attackers to bypass authentication via a filename with a .ats exte... Read more

    Affected Products : badblue
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0324

    Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long replies that are not properly handled by the (1) userhost_cmd_returned function, or (2)... Read more

    Affected Products : epic4
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2003-0225

    The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumpti... Read more

    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2002-1457

    SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements via the search parameter.... Read more

    Affected Products : l-forum
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0361

    gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.... Read more

    Affected Products : debian_linux
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2003-0356

    Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync,... Read more

    Affected Products : ethereal
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2003-0360

    Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.... Read more

    Affected Products : debian_linux
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2003-0227

    The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Ser... Read more

    Affected Products : windows_2000 windows_nt
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
Showing 20 of 293260 Results