Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 4.6

    MEDIUM
    CVE-2003-0194

    tcpdump does not properly drop privileges to the pcap user when starting up.... Read more

    Affected Products : linux tcpdump
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2003-0306

    Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo parameter.... Read more

    Affected Products : windows_xp
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2003-0330

    Buffer overflow in unknown versions of Maelstrom allows local users to execute arbitrary code via a long -player command line argument.... Read more

    Affected Products : maelstrom
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2003-0226

    Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled.... Read more

    Affected Products : internet_information_services iis
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2003-0188

    lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.... Read more

    Affected Products : linux lv lv
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2002-1457

    SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements via the search parameter.... Read more

    Affected Products : l-forum
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2003-0331

    SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain ttForum Administrator privileges via the Ignorelist-Textfield argument in the Preferences page.... Read more

    Affected Products : ttforum
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2003-0240

    The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).... Read more

    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2003-0225

    The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumpti... Read more

    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2003-0321

    Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled... Read more

    Affected Products : bitchx
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2003-0241

    FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is render... Read more

    Affected Products : goldmine
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.6

    HIGH
    CVE-2003-0332

    The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which allows remote attackers to bypass authentication via a filename with a .ats exte... Read more

    Affected Products : badblue
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2003-0324

    Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long replies that are not properly handled by the (1) userhost_cmd_returned function, or (2)... Read more

    Affected Products : epic4
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2002-1463

    Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers (ISN), which allows remote attackers t... Read more

    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2003-0358

    Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.... Read more

    Affected Products : debian_linux nethack falconseye
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2003-0323

    Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via responses that are not properly fed to the my_strcat function by (1) ctcp_buffer, (2) cannot_join_... Read more

    Affected Products : ircii
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2003-0189

    The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid userna... Read more

    Affected Products : http_server
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2003-0319

    Buffer overflow in the IMAP server (IMAPMax) for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated users to execute arbitrary code via a long SELECT command.... Read more

    Affected Products : mailmax
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2003-0307

    Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" value into the email address field.... Read more

    Affected Products : poster
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2002-1456

    Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.... Read more

    Affected Products : mirc
    • Published: Jun. 09, 2003
    • Modified: Apr. 03, 2025
Showing 20 of 293584 Results