CVEs published in May 2003

120 vulnerabilities, 10 critical, 0 exploited.

• falconseye project falconseye, nethack, debian linux +2 more Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is... CVE-2003-0358 Public exploitFix available 4.6 MediumMay 30, 2003
• ethereal group ethereal Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers... CVE-2003-0357 Fix available 7.5 HighMay 30, 2003
• ethereal Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to... CVE-2003-0356 Fix available 9.8 CriticalMay 30, 2003
• apple safari, kde konqueror embedded +1 more Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509... CVE-2003-0355 5.0 MediumMay 30, 2003
• apache http server Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for... CVE-2003-0245 Public exploitFix available EPSS 63.5% 5.0 MediumMay 30, 2003
• frontrange goldmine FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default... CVE-2003-0241 7.5 HighMay 30, 2003
• axis 2100 network camera, 2110 network camera, 2120 network camera +6 more +8 more The web-based administration capability for various Axis Network Camera products allows remote... CVE-2003-0240 Public exploit EPSS 29.5% 10.0 HighMay 30, 2003
• microsoft windows nt, windows 2000 +1 more The logging capability for unicast and multicast transmissions in the ISAPI extension for... CVE-2003-0227 Public exploit EPSS 34.4% 5.0 MediumMay 30, 2003
• microsoft internet information services Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a... CVE-2003-0226 Public exploit EPSS 43.2% 5.0 MediumMay 30, 2003
• microsoft internet information server, internet information services +1 more The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0... CVE-2003-0225 EPSS 38.5% 5.0 MediumMay 30, 2003
• microsoft internet information services Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local... CVE-2003-0224 EPSS 18.3% 10.0 HighMay 30, 2003
• microsoft internet information server, internet information services +1 more Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in... CVE-2003-0223 EPSS 17.3% 6.8 MediumMay 30, 2003
• apache http server The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle... CVE-2003-0189 Fix available EPSS 15.1% 5.0 MediumMay 30, 2003
• microsoft internet explorer Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information... CVE-2002-1564 EPSS 11.7% 5.0 MediumMay 30, 2003
• debian linux Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV)... CVE-2003-0362 Fix available 5.0 MediumMay 27, 2003
• debian linux gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as... CVE-2003-0361 Fix available 7.5 HighMay 27, 2003
• debian linux Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and... CVE-2003-0360 Fix available 7.5 HighMay 27, 2003
• iisprotect iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request... CVE-2003-0317 Public exploit 7.5 HighMay 23, 2003
• wsmp3 daemon, web server +1 more Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote... CVE-2003-0339 Public exploit 7.5 HighMay 22, 2003
• platform lsadmin The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute... CVE-2003-0337 4.6 MediumMay 22, 2003
• qualcomm eudora Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a... CVE-2003-0336 Public exploit 5.0 MediumMay 22, 2003
• slackware linux rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be... CVE-2003-0335 7.5 HighMay 22, 2003
• working resources inc. badblue The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first... CVE-2003-0332 Public exploit 7.6 HighMay 22, 2003
• ttcms ttforum SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain... CVE-2003-0331 10.0 HighMay 22, 2003
• ambrosia software maelstrom Buffer overflow in unknown versions of Maelstrom allows local users to execute arbitrary code via... CVE-2003-0330 4.6 MediumMay 22, 2003
• aclogic cesarftp CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could... CVE-2003-0329 4.6 MediumMay 22, 2003
• slocate Integer overflow in parse_decode_path() of slocate may allow attackers to execute arbitrary code... CVE-2003-0326 4.6 MediumMay 22, 2003
• ambrosia software maelstrom Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary... CVE-2003-0325 Public exploit 4.6 MediumMay 22, 2003
• andy prevost ttcms header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by... CVE-2003-0320 Public exploit 7.5 HighMay 22, 2003
• smartmax software mailmax Buffer overflow in the IMAP server (IMAPMax) for SmartMax MailMax 5.0.10.8 and earlier allows... CVE-2003-0319 7.5 HighMay 22, 2003
• francisco burzi php-nuke Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier... CVE-2003-0318 4.3 MediumMay 22, 2003
• selom ofori blackmoon ftp server BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates... CVE-2003-0343 4.6 MediumMay 21, 2003
• owl intranet engine Cross-site scripting (XSS) vulnerability in Owl Intranet Engine 0.71 and earlier allows remote... CVE-2003-0341 6.8 MediumMay 21, 2003
• demarc security puresecure Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext,... CVE-2003-0340 7.5 HighMay 21, 2003
• wsmp3 daemon, web server +1 more Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote... CVE-2003-0338 Public exploit 5.0 MediumMay 21, 2003
• selom ofori blackmoon ftp server BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user... CVE-2003-0342 4.6 MediumMay 20, 2003
• hp hp-ux Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 (C-Kermit 6.0.192 and possibly other... CVE-2003-0333 7.2 HighMay 19, 2003
• epic epic4 EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious... CVE-2003-0328 Public exploitFix available 7.5 HighMay 19, 2003
• colten edwards bitchx Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to... CVE-2003-0322 Fix available 5.0 MediumMay 19, 2003
• colten edwards bitchx Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC... CVE-2003-0321 Fix available 7.5 HighMay 19, 2003
• fourelle venturi wireless venturi client Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used... CVE-2003-0316 5.0 MediumMay 17, 2003
• snowblind.net snowblind web server Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and... CVE-2003-0315 Public exploit 7.5 HighMay 17, 2003
• snowblind.net snowblind web server Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) via a URL... CVE-2003-0314 Public exploit 6.4 MediumMay 17, 2003
• snowblind.net snowblind web server Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to list... CVE-2003-0313 6.4 MediumMay 17, 2003
• snowblind.net snowblind web server Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read... CVE-2003-0312 Public exploit 6.4 MediumMay 17, 2003
• ez publish Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote... CVE-2003-0310 Public exploit 6.8 MediumMay 17, 2003
• microsoft internet explorer Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions... CVE-2003-0309 Public exploit EPSS 50.0% 7.5 HighMay 17, 2003
• poster Poster version.two allows remote authenticated users to gain administrative privileges by... CVE-2003-0307 7.5 HighMay 17, 2003
• microsoft windows xp Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the... CVE-2003-0306 Public exploit 7.2 HighMay 17, 2003
• cisco ios The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR... CVE-2003-0305 5.0 MediumMay 17, 2003
• Show olderLoading…