Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2003
September

CVEs published in September 2003

107 vulnerabilities, 17 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

kismacKisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels or kernel modules,...CVE-2003-07037.2 HighSeptember 12, 2003
gnome gtkhtmlgtkhtml before 1.1.10, as used in Evolution, allows remote attackers to cause a denial of service...CVE-2003-0541Fix available5.0 MediumSeptember 12, 2003
microsoft windows 2000, windows 2003 server, windows nt +1 more +3 moreHeap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the...CVE-2003-0528EPSS 41.0%10.0 HighSeptember 12, 2003
per magne knutsen cartmanPer Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers...CVE-2002-13525.0 MediumSeptember 12, 2003
sane, sane sane-backend +1 moresaned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate...CVE-2003-0778Fix available5.0 MediumSeptember 11, 2003
sane, sane sane-backend +1 moresaned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly...CVE-2003-0777Fix available5.0 MediumSeptember 11, 2003
sane, sane sane-backend +1 moresaned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers...CVE-2003-0776Fix available7.5 HighSeptember 11, 2003
sane, sane sane-backend +1 moresaned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a...CVE-2003-0775Fix available5.0 MediumSeptember 11, 2003
sane, sane sane-backend +1 moresaned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows...CVE-2003-0774Fix available7.5 HighSeptember 11, 2003
sane, sane sane-backend +1 moresaned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host...CVE-2003-0773Fix available7.5 HighSeptember 11, 2003
sun solaris, sunos +1 moreAspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the...CVE-2003-108110.0 HighSeptember 9, 2003
johannes sixt kdbgKdbg 1.1.0 through 1.2.8 does not check permissions of the .kdbgrc file, which allows local users...CVE-2003-06444.6 MediumSeptember 7, 2003
nicolas boullis mah-jongUnknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of...CVE-2003-0706Public exploitFix available5.0 MediumSeptember 7, 2003
nicolas boullis mah-jongBuffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code.CVE-2003-0705Public exploitFix available7.5 HighSeptember 7, 2003
checkpoint firewall-1Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses...CVE-2003-0757Public exploit5.0 MediumSeptember 6, 2003
sitebuilderDirectory traversal vulnerability in sitebuilder.cgi in SiteBuilder 1.4 allows remote attackers...CVE-2003-07565.0 MediumSeptember 6, 2003
gtkftpd gtkftpBuffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute...CVE-2003-0755Public exploit10.0 HighSeptember 6, 2003
newsphpnphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP...CVE-2003-07547.5 HighSeptember 6, 2003
newsphpnphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full...CVE-2003-07535.0 MediumSeptember 6, 2003
attila-php.net attilaphpSQL injection vulnerability in global.php3 of AttilaPHP 3.0, and possibly earlier versions,...CVE-2003-0752Public exploit7.5 HighSeptember 6, 2003
py-membresSQL injection vulnerability in pass_done.php for PY-Membres 4.2 and earlier allows remote...CVE-2003-07517.5 HighSeptember 6, 2003
py-membressecure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication by...CVE-2003-07507.5 HighSeptember 6, 2003
sap internet transaction serverCross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS)...CVE-2003-0749Public exploit6.8 MediumSeptember 6, 2003
sap internet transaction serverDirectory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0...CVE-2003-0748Public exploit5.0 MediumSeptember 6, 2003
sap internet transaction serverwgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to...CVE-2003-0747Public exploit5.0 MediumSeptember 6, 2003
hp openviewVarious Distributed Computing Environment (DCE) implementations, including HP OpenView, allow...CVE-2003-07465.0 MediumSeptember 6, 2003
castle rock computing snmpcSNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows...CVE-2003-074510.0 HighSeptember 6, 2003
leafnodeThe fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial...CVE-2003-0744Fix available5.0 MediumSeptember 6, 2003
stunnelStunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(),...CVE-2003-0740Public exploitFix available4.6 MediumSeptember 4, 2003
vmware workstationVMware Workstation 4.0.1 for Linux, build 5289 and earlier, allows local users to delete...CVE-2003-07394.6 MediumSeptember 4, 2003
phpwebsiteThe calendar module in phpWebSite 0.9.x and earlier allows remote attackers to cause a denial of...CVE-2003-07387.8 HighSeptember 4, 2003
phpwebsiteThe calendar module in phpWebSite 0.9.x and earlier allows remote attackers to obtain the full...CVE-2003-07375.0 MediumSeptember 4, 2003
phpwebsiteMultiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote...CVE-2003-0736Public exploit6.8 MediumSeptember 4, 2003
phpwebsiteSQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote...CVE-2003-0735Public exploit7.5 HighSeptember 4, 2003
padl software pam ldapUnknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based...CVE-2003-0734Fix available10.0 HighSeptember 4, 2003
bea liquid data, weblogic integration, weblogic server +2 moreMultiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid...CVE-2003-07336.8 MediumSeptember 4, 2003
cisco ciscoworks common management foundation, ciscoworks cd1, resource manager +1 more +3 moreCiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain...CVE-2003-073210.0 HighSeptember 4, 2003
cisco ciscoworks common management foundation, ciscoworks cd1, resource manager +1 more +3 moreCiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain...CVE-2003-073110.0 HighSeptember 4, 2003
microsoft wordperfect converterBuffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary...CVE-2003-0666Public exploitEPSS 21.9%7.5 HighSeptember 4, 2003
microsoft accessBuffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000,...CVE-2003-0665Public exploitEPSS 30.1%7.5 HighSeptember 4, 2003
microsoft word, works +1 moreMicrosoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document...CVE-2003-06647.5 HighSeptember 4, 2003
microsoft windows nt, windows 2000, windows 2003 server +1 more +3 moreThe NetBT Name Service (NBNS) for NetBIOS in Windows NT 4.0, 2000, XP, and Server 2003 may...CVE-2003-0661EPSS 25.2%5.0 MediumSeptember 4, 2003
microsoft visual basic, office, project +1 more +3 moreHeap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications ...CVE-2003-0347Public exploitEPSS 54.9%10.0 HighSeptember 4, 2003
university of cambridge eximHeap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before...CVE-2003-0743Fix available7.5 HighSeptember 4, 2003
netbsd, xfree86 project x11r6 +1 moreMultiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote...CVE-2003-07307.5 HighSeptember 3, 2003
tellurian tftpdntBuffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a...CVE-2003-0729Public exploitEPSS 10.4%7.5 HighSeptember 3, 2003
hordeHorde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create...CVE-2003-07286.4 MediumSeptember 3, 2003
oracle database serverMultiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release...CVE-2003-0727Public exploitEPSS 68.4%2.1 LowSeptember 3, 2003
realnetworks realone player, realone desktop manager, realone enterprise desktop +2 moreRealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via...CVE-2003-0726Public exploit5.1 MediumSeptember 3, 2003
realnetworks helix universal server, realserver +1 moreBuffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or...CVE-2003-0725Public exploitEPSS 48.6%7.5 HighSeptember 3, 2003
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open