VYPR

CVEs

377,913 total · page 7421 of 7,559

AllCriticalHighKEV
  • CVE-2003-0315Jun 16, 2003
    Snowblind.net
    Snowblind Web Server
    risk 0.03cvss —epss 0.04

    Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP request, which may trigger a buffer overflow.

  • CVE-2003-0316Jun 16, 2003
    Fourelle Venturi Wireless
    Venturi Client
    risk 0.00cvss —epss 0.01

    Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, including an open relay for SMTP, which allows it to be abused by spammers.

  • CVE-2003-0344Jun 16, 2003
    Microsoft
    Internet Explorer
    risk 0.10cvss —epss 0.81

    Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.

  • CVE-2003-0354Jun 16, 2003
    Artifex
    Ghostscript
    risk 0.00cvss —epss 0.02

    Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.

  • CVE-2003-0364Jun 16, 2003
    Linux
    Kernel
    risk 0.00cvss —epss 0.06

    The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.

  • CVE-2003-0365Jun 16, 2003
    Icq
    Icqlite
    risk 0.00cvss —epss 0.00

    ICQLite 2003a creates the ICQ Lite directory with an ACE for "Full Control" privileges for Interactive Users, which allows local users to gain privileges as other users by replacing the executables with malicious programs.

  • CVE-2003-0370Jun 16, 2003
    KDE
    Kde
    risk 0.00cvss —epss 0.02

    Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.

  • CVE-2003-0371Jun 16, 2003
    Prishtina Soft
    Prishtina FTP
    risk 0.04cvss —epss 0.06

    Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP banner.

  • CVE-2003-0372Jun 16, 2003
    Tenable
    Nessus
    risk 0.03cvss —epss 0.01

    Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL…

  • CVE-2003-0373Jun 16, 2003
    Tenable
    Nessus
    risk 0.00cvss —epss 0.00

    Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code via (1) a long proto argument to the scanner_add_port function, (2) a long user argument to…

  • CVE-2003-0374Jun 16, 2003
    Tenable
    Nessus
    risk 0.00cvss —epss 0.02

    Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373, aka "similar issues in other nasl functions as well as in libnessus."

  • CVE-2003-0375Jun 16, 2003
    XMB Forum
    Xmb
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in member.php of XMBforum XMB 1.8.x (aka Partagium) allows remote attackers to insert arbitrary HTML and web script via the "member" parameter.

  • CVE-2003-0376Jun 16, 2003
    Eudora
    Eudora
    risk 0.03cvss —epss 0.02

    Buffer overflow in Eudora 5.2.1 allows remote attackers to cause a denial of service (crash and failed restart) and possibly execute arbitrary code via an Attachment Converted argument with a large number of . (dot) characters.

  • CVE-2003-0377Jun 16, 2003
    Iisprotect
    Iisprotect
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert arbitrary SQL and execute code via certain variables, as demonstrated using the GroupName variable in SiteAdmin.ASP.

  • CVE-2003-0378Jun 16, 2003
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.01

    The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set.

  • CVE-2003-0420Jun 13, 2003
    Apple Inc.
    Mac OS X Server
    risk 0.00cvss —epss 0.00

    Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool.

  • CVE-2002-1454Jun 9, 2003
    Mywebserver
    Mywebserver
    risk 0.00cvss —epss 0.02

    MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message.

  • CVE-2002-1455Jun 9, 2003
    Omnicron
    Omnihttpd
    risk 0.03cvss —epss 0.04

    Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via (1) test.php, (2) test.shtml, or (3) redir.exe.

  • CVE-2002-1456Jun 9, 2003
    Khaled Mardam Bey
    Mirc
    risk 0.04cvss —epss 0.12

    Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.

  • CVE-2002-1457Jun 9, 2003
    Leszek Krupinski
    L Forum
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements via the search parameter.

  • CVE-2002-1458Jun 9, 2003
    Leszek Krupinski
    L Forum
    risk 0.00cvss —epss 0.02

    Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, (3) Subject and (4) Body.

  • CVE-2002-1459Jun 9, 2003
    Leszek Krupinski
    L Forum
    risk 0.00cvss —epss 0.02

    Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, and (3) Subject.

  • CVE-2002-1460Jun 9, 2003
    Leszek Krupinski
    L Forum
    risk 0.00cvss —epss 0.02

    L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST (attachment, attachment_name, attachment_size and attachment_type), which allows remote attackers to read arbitrary files.

  • CVE-2002-1461Jun 9, 2003
    Webscriptworld
    Web Shop Manager
    risk 0.00cvss —epss 0.02

    Web Shop Manager 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box.

  • CVE-2002-1462Jun 9, 2003
    Organicphp
    PHP Affiliate
    risk 0.00cvss —epss 0.01

    details2.php in OrganicPHP PHP-affiliate 1.0, and possibly later versions, allows remote attackers to modify information of other users by modifying certain hidden form fields.

  • CVE-2002-1463Jun 9, 2003
    Symantec
    Raptor Firewall
    risk 0.04cvss —epss 0.07

    Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers (ISN), which allows remote attackers to spoof connections.

  • CVE-2002-1564Jun 9, 2003
    Microsoft
    Internet Explorer
    risk 0.01cvss —epss 0.12

    Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains script which is executed when a page is loaded, aka the "Script within Cookies Reading Cookies" vulnerability.

  • CVE-2003-0188Jun 9, 2003
    Lv
    Lv
    risk 0.00cvss —epss 0.00

    lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.

  • CVE-2003-0189Jun 9, 2003
    Apache
    HTTP Server
    risk 0.01cvss —epss 0.15

    The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid usernames and passwords) when…

  • CVE-2003-0194Jun 9, 2003
    Red Hat
    Tcpdump
    risk 0.00cvss —epss 0.00

    tcpdump does not properly drop privileges to the pcap user when starting up.

  • CVE-2003-0223Jun 9, 2003
    Microsoft
    Internet Information Server
    risk 0.01cvss —epss 0.17

    Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to embed a URL containing script in a redirection message.

  • CVE-2003-0224Jun 9, 2003
    Microsoft
    Internet Information Server
    risk 0.01cvss —epss 0.18

    Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."

  • CVE-2003-0225Jun 9, 2003
    Microsoft
    Internet Information Server
    risk 0.03cvss —epss 0.38

    The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumption) with an ASP page.

  • CVE-2003-0226Jun 9, 2003
    Microsoft
    Internet Information Server
    risk 0.06cvss —epss 0.43

    Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled.

  • CVE-2003-0227Jun 9, 2003
    Microsoft
    Windows Nt
    risk 0.06cvss —epss 0.34

    The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute…

  • CVE-2003-0240Jun 9, 2003
    Axis
    2100 Network Camera
    risk 0.05cvss —epss 0.30

    The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).

  • CVE-2003-0241Jun 9, 2003
    Frontrange
    Goldmine
    risk 0.00cvss —epss 0.03

    FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is rendered in IE using a less…

  • CVE-2003-0242Jun 9, 2003
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.03

    IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitly allowed by the policies.

  • CVE-2003-0245Jun 9, 2003
    Apache
    HTTP Server
    risk 0.08cvss —epss 0.63

    Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to…

  • CVE-2003-0303Jun 9, 2003
    One||zero
    Helpdesk
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter.

  • CVE-2003-0304Jun 9, 2003
    One||zero
    Helpdesk
    risk 0.04cvss —epss 0.08

    one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script.

  • CVE-2003-0305Jun 9, 2003
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denial of service (crash) via malformed RTR packets to port 1967.

  • CVE-2003-0306Jun 9, 2003
    Microsoft
    Windows Xp
    risk 0.03cvss —epss 0.04

    Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo parameter.

  • CVE-2003-0307Jun 9, 2003
    Poster
    Poster
    risk 0.00cvss —epss 0.01

    Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" value into the email address field.

  • CVE-2003-0309Jun 9, 2003
    Microsoft
    Internet Explorer
    risk 0.07cvss —epss 0.50

    Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which…

  • CVE-2003-0318Jun 9, 2003
    PHP-Nuke
    PHP Nuke
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers to insert arbitrary web script via the year parameter.

  • CVE-2003-0319Jun 9, 2003
    Smartmax Software
    Mailmax
    risk 0.00cvss —epss 0.04

    Buffer overflow in the IMAP server (IMAPMax) for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated users to execute arbitrary code via a long SELECT command.

  • CVE-2003-0320Jun 9, 2003
    Ttcms
    Ttcms
    risk 0.03cvss —epss 0.05

    header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin parameter to "1" and modifying the admin_root parameter to point to a URL that contains a Trojan horse header.inc.php script.

  • CVE-2003-0321Jun 9, 2003
    Bitchx
    Bitchx
    risk 0.00cvss —epss 0.04

    Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions (1)…

  • CVE-2003-0322Jun 9, 2003
    Bitchx
    Bitchx
    risk 0.00cvss —epss 0.01

    Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service (crash).