| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2003-0555 | 0.00 | — | 0.02 | Aug 18, 2003 | ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a "%x" filename, possibly triggering a format string vulnerability. | |||
| CVE-2003-0556 | 0.00 | — | 0.01 | Aug 18, 2003 | Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of "user" requests to the control port 5003, as demonstrated using the blast TCP stress tester. | |||
| CVE-2003-0557 | 0.03 | — | 0.01 | Aug 18, 2003 | SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field. | |||
| CVE-2003-0558 | 0.08 | — | 0.56 | Aug 18, 2003 | Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request. | |||
| CVE-2003-0559 | 0.00 | — | 0.01 | Aug 18, 2003 | mainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by modifying the MAIN_PATH parameter to reference a URL on a remote web server that contains the code. | |||
| CVE-2003-0560 | 0.03 | — | 0.03 | Aug 18, 2003 | SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter. | |||
| CVE-2003-0561 | 0.03 | — | 0.04 | Aug 18, 2003 | Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3) PASS, (4) ACCT, and possibly other commands. | |||
| CVE-2003-0567 | 0.04 | — | 0.17 | Aug 18, 2003 | Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full. | |||
| CVE-2003-0572 | 0.00 | — | 0.01 | Aug 18, 2003 | Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service (memory consumption). | |||
| CVE-2003-0573 | 0.00 | — | 0.01 | Aug 18, 2003 | The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sanity checking, with unknown impact. | |||
| CVE-2003-0574 | 0.00 | — | 0.00 | Aug 18, 2003 | Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables, a different vulnerability than CVE-2001-0797 and CVE-1999-0028. | |||
| CVE-2003-0577 | — | 0.00 | — | 0.04 | Aug 18, 2003 | mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size. | ||
| CVE-2003-0578 | Hig | 0.51 | 7.8 | 0.00 | Aug 18, 2003 | cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files. | ||
| CVE-2003-0579 | 0.03 | — | 0.01 | Aug 18, 2003 | uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by providing a pathname that is under control of the user. | |||
| CVE-2003-0580 | 0.00 | — | 0.01 | Aug 18, 2003 | Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument. | |||
| CVE-2003-0581 | 0.00 | — | 0.03 | Aug 18, 2003 | X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a (1) FS_QueryXExtents8 or (2) FS_QueryXBitmaps8 packet, and possibly other types of packets, with a large num_ranges value, which causes an… | |||
| CVE-2003-0583 | 0.00 | — | 0.00 | Aug 18, 2003 | Buffer overflow in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via a long command line argument. | |||
| CVE-2003-0584 | 0.03 | — | 0.01 | Aug 18, 2003 | Format string vulnerability in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument. | |||
| CVE-2003-0585 | 0.00 | — | 0.02 | Aug 18, 2003 | SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authentication and execute arbitrary SQL code via the (1) user or (2) pass parameters. | |||
| CVE-2003-0586 | 0.03 | — | 0.06 | Aug 18, 2003 | Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php. | |||
| CVE-2003-0587 | 0.00 | — | 0.01 | Aug 18, 2003 | Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x allows remote authenticated users to execute arbitrary web script and gain administrative access via the "displayed name" attribute of the "ubber" cookie. | |||
| CVE-2003-0588 | 0.00 | — | 0.03 | Aug 18, 2003 | admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password. | |||
| CVE-2003-0589 | 0.00 | — | 0.03 | Aug 18, 2003 | admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password. | |||
| CVE-2003-0590 | 0.03 | — | 0.02 | Aug 18, 2003 | Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon (image_subject) field. | |||
| CVE-1999-1263 | 0.00 | — | 0.01 | Aug 15, 2003 | Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file. | |||
| CVE-2003-1088 | 0.03 | — | 0.02 | Aug 11, 2003 | Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method parameter. | |||
| CVE-2003-0449 | 0.03 | — | 0.01 | Aug 7, 2003 | Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via (1) a PATH environment variable that points to malicious libraries, as demonstrated using libjutil.so in_proapsv, or (2) the -installdir… | |||
| CVE-2003-0450 | 0.00 | — | 0.04 | Aug 7, 2003 | Cistron RADIUS daemon (radiusd-cistron) 1.6.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large value in an NAS-Port attribute, which is interpreted as a negative number and causes a buffer overflow. | |||
| CVE-2003-0451 | 0.00 | — | 0.00 | Aug 7, 2003 | Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain long command line arguments. | |||
| CVE-2003-0452 | 0.00 | — | 0.00 | Aug 7, 2003 | Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restrictions via (1) long environment variables or (2) long "file redirections." | |||
| CVE-2003-0453 | 0.00 | — | 0.03 | Aug 7, 2003 | traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code via certain "nprobes" and "max_ttl" arguments that cause an integer overflow that is used when allocating memory, which leads to a buffer overflow. | |||
| CVE-2003-0454 | 0.03 | — | 0.03 | Aug 7, 2003 | Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable. | |||
| CVE-2003-0455 | 0.00 | — | 0.00 | Aug 7, 2003 | The imagemagick libmagick library 5.5 and earlier creates temporary files insecurely, which allows local users to create or overwrite arbitrary files. | |||
| CVE-2003-0469 | 0.07 | — | 0.45 | Aug 7, 2003 | Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align"… | |||
| CVE-2003-0470 | 0.04 | — | 0.09 | Aug 7, 2003 | Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings. | |||
| CVE-2003-0471 | 0.08 | — | 0.61 | Aug 7, 2003 | Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument. | |||
| CVE-2003-0472 | 0.00 | — | 0.02 | Aug 7, 2003 | The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scanning. | |||
| CVE-2003-0473 | 0.00 | — | 0.02 | Aug 7, 2003 | Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications. | |||
| CVE-2003-0474 | 0.00 | — | 0.02 | Aug 7, 2003 | Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request containing .. sequences, a different vulnerability than CVE-2003-0475. | |||
| CVE-2003-0475 | 0.00 | — | 0.02 | Aug 7, 2003 | Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing URL-encoded .. sequences ("%5c%2e%2e"), a different vulnerability than CVE-2003-0474. | |||
| CVE-2003-0476 | 0.00 | — | 0.00 | Aug 7, 2003 | The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors. | |||
| CVE-2003-0477 | 0.00 | — | 0.01 | Aug 7, 2003 | wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command without an argument. | |||
| CVE-2003-0478 | 0.04 | — | 0.12 | Aug 7, 2003 | Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) ircd-RU, when running in debug mode, allows remote attackers to cause a denial of… | |||
| CVE-2003-0479 | 0.00 | — | 0.01 | Aug 7, 2003 | Cross-site scripting (XSS) vulnerability in the guestbook for WebBBS allows remote attackers to insert arbitrary web script via the (1) Name, (2) Email, or (3) Message fields. | |||
| CVE-2003-0480 | 0.00 | — | 0.00 | Aug 7, 2003 | VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation." | |||
| CVE-2003-0481 | 0.03 | — | 0.03 | Aug 7, 2003 | Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to file_select.php. | |||
| CVE-2003-0482 | 0.04 | — | 0.07 | Aug 7, 2003 | TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code. | |||
| CVE-2003-0483 | 0.03 | — | 0.04 | Aug 7, 2003 | Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member parameter to member.php or (2) the action parameter to buddy.php. | |||
| CVE-2003-0484 | 0.00 | — | 0.01 | Aug 7, 2003 | Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topic_id parameter. | |||
| CVE-2003-0485 | 0.00 | — | 0.01 | Aug 7, 2003 | Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type. |
- CVE-2003-0555Aug 18, 2003risk 0.00cvss —epss 0.02
ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a "%x" filename, possibly triggering a format string vulnerability.
- CVE-2003-0556Aug 18, 2003risk 0.00cvss —epss 0.01
Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of "user" requests to the control port 5003, as demonstrated using the blast TCP stress tester.
- CVE-2003-0557Aug 18, 2003risk 0.03cvss —epss 0.01
SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field.
- CVE-2003-0558Aug 18, 2003risk 0.08cvss —epss 0.56
Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request.
- CVE-2003-0559Aug 18, 2003risk 0.00cvss —epss 0.01
mainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by modifying the MAIN_PATH parameter to reference a URL on a remote web server that contains the code.
- CVE-2003-0560Aug 18, 2003risk 0.03cvss —epss 0.03
SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter.
- CVE-2003-0561Aug 18, 2003risk 0.03cvss —epss 0.04
Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3) PASS, (4) ACCT, and possibly other commands.
- CVE-2003-0567Aug 18, 2003risk 0.04cvss —epss 0.17
Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.
- CVE-2003-0572Aug 18, 2003risk 0.00cvss —epss 0.01
Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service (memory consumption).
- CVE-2003-0573Aug 18, 2003risk 0.00cvss —epss 0.01
The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sanity checking, with unknown impact.
- CVE-2003-0574Aug 18, 2003risk 0.00cvss —epss 0.00
Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables, a different vulnerability than CVE-2001-0797 and CVE-1999-0028.
- CVE-2003-0577Aug 18, 2003risk 0.00cvss —epss 0.04
mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size.
- risk 0.51cvss 7.8epss 0.00
cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files.
- CVE-2003-0579Aug 18, 2003risk 0.03cvss —epss 0.01
uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by providing a pathname that is under control of the user.
- CVE-2003-0580Aug 18, 2003risk 0.00cvss —epss 0.01
Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument.
- CVE-2003-0581Aug 18, 2003risk 0.00cvss —epss 0.03
X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a (1) FS_QueryXExtents8 or (2) FS_QueryXBitmaps8 packet, and possibly other types of packets, with a large num_ranges value, which causes an…
- CVE-2003-0583Aug 18, 2003risk 0.00cvss —epss 0.00
Buffer overflow in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via a long command line argument.
- CVE-2003-0584Aug 18, 2003risk 0.03cvss —epss 0.01
Format string vulnerability in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument.
- CVE-2003-0585Aug 18, 2003risk 0.00cvss —epss 0.02
SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authentication and execute arbitrary SQL code via the (1) user or (2) pass parameters.
- CVE-2003-0586Aug 18, 2003risk 0.03cvss —epss 0.06
Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php.
- CVE-2003-0587Aug 18, 2003risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x allows remote authenticated users to execute arbitrary web script and gain administrative access via the "displayed name" attribute of the "ubber" cookie.
- CVE-2003-0588Aug 18, 2003risk 0.00cvss —epss 0.03
admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.
- CVE-2003-0589Aug 18, 2003risk 0.00cvss —epss 0.03
admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.
- CVE-2003-0590Aug 18, 2003risk 0.03cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon (image_subject) field.
- CVE-1999-1263Aug 15, 2003risk 0.00cvss —epss 0.01
Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file.
- CVE-2003-1088Aug 11, 2003risk 0.03cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method parameter.
- CVE-2003-0449Aug 7, 2003risk 0.03cvss —epss 0.01
Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via (1) a PATH environment variable that points to malicious libraries, as demonstrated using libjutil.so in_proapsv, or (2) the -installdir…
- CVE-2003-0450Aug 7, 2003risk 0.00cvss —epss 0.04
Cistron RADIUS daemon (radiusd-cistron) 1.6.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large value in an NAS-Port attribute, which is interpreted as a negative number and causes a buffer overflow.
- CVE-2003-0451Aug 7, 2003risk 0.00cvss —epss 0.00
Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain long command line arguments.
- CVE-2003-0452Aug 7, 2003risk 0.00cvss —epss 0.00
Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restrictions via (1) long environment variables or (2) long "file redirections."
- CVE-2003-0453Aug 7, 2003risk 0.00cvss —epss 0.03
traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code via certain "nprobes" and "max_ttl" arguments that cause an integer overflow that is used when allocating memory, which leads to a buffer overflow.
- CVE-2003-0454Aug 7, 2003risk 0.03cvss —epss 0.03
Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable.
- CVE-2003-0455Aug 7, 2003risk 0.00cvss —epss 0.00
The imagemagick libmagick library 5.5 and earlier creates temporary files insecurely, which allows local users to create or overwrite arbitrary files.
- CVE-2003-0469Aug 7, 2003risk 0.07cvss —epss 0.45
Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align"…
- CVE-2003-0470Aug 7, 2003risk 0.04cvss —epss 0.09
Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings.
- CVE-2003-0471Aug 7, 2003risk 0.08cvss —epss 0.61
Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument.
- CVE-2003-0472Aug 7, 2003risk 0.00cvss —epss 0.02
The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scanning.
- CVE-2003-0473Aug 7, 2003risk 0.00cvss —epss 0.02
Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications.
- CVE-2003-0474Aug 7, 2003risk 0.00cvss —epss 0.02
Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request containing .. sequences, a different vulnerability than CVE-2003-0475.
- CVE-2003-0475Aug 7, 2003risk 0.00cvss —epss 0.02
Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing URL-encoded .. sequences ("%5c%2e%2e"), a different vulnerability than CVE-2003-0474.
- CVE-2003-0476Aug 7, 2003risk 0.00cvss —epss 0.00
The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.
- CVE-2003-0477Aug 7, 2003risk 0.00cvss —epss 0.01
wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command without an argument.
- CVE-2003-0478Aug 7, 2003risk 0.04cvss —epss 0.12
Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) ircd-RU, when running in debug mode, allows remote attackers to cause a denial of…
- CVE-2003-0479Aug 7, 2003risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in the guestbook for WebBBS allows remote attackers to insert arbitrary web script via the (1) Name, (2) Email, or (3) Message fields.
- CVE-2003-0480Aug 7, 2003risk 0.00cvss —epss 0.00
VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation."
- CVE-2003-0481Aug 7, 2003risk 0.03cvss —epss 0.03
Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to file_select.php.
- CVE-2003-0482Aug 7, 2003risk 0.04cvss —epss 0.07
TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code.
- CVE-2003-0483Aug 7, 2003risk 0.03cvss —epss 0.04
Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member parameter to member.php or (2) the action parameter to buddy.php.
- CVE-2003-0484Aug 7, 2003risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topic_id parameter.
- CVE-2003-0485Aug 7, 2003risk 0.00cvss —epss 0.01
Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type.