CVEs published in December 2003

484 vulnerabilities, 35 critical, 0 exploited.

• xmlsoft libxml2 libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which... CVE-2003-1564 Fix available 6.5 MediumDecember 31, 2003
• sun cluster Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters (OPS/RAC)... CVE-2003-1563 4.0 MediumDecember 31, 2003
• openbsd openssh sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard... CVE-2003-1562 Fix available 7.6 HighDecember 31, 2003
• opera Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:... CVE-2003-1561 4.3 MediumDecember 31, 2003
• netscape navigator Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which... CVE-2003-1560 5.0 MediumDecember 31, 2003
• microsoft internet explorer, ie +1 more Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers... CVE-2003-1559 EPSS 15.8% 5.0 MediumDecember 31, 2003
• fefe fnord Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service ... CVE-2003-1558 5.0 MediumDecember 31, 2003
• spamassassin Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B... CVE-2003-1557 Fix available 7.6 HighDecember 31, 2003
• cgi city cc guestbook Cross-site scripting (XSS) vulnerability in cc_guestbook.pl in CGI City CC GuestBook allows... CVE-2003-1556 4.3 MediumDecember 31, 2003
• scoznet scozbook ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an invalid... CVE-2003-1555 Public exploit 5.0 MediumDecember 31, 2003
• scoznet scozbook Cross-site scripting (XSS) vulnerability in scozbook/add.php in ScozNet ScozBook 1.1 BETA allows... CVE-2003-1554 4.3 MediumDecember 31, 2003
• sips Haakon Nilsen Simple Internet Publishing System (SIPS) 0.2.2 stores sensitive information under... CVE-2003-1553 Public exploit 4.3 MediumDecember 31, 2003
• graeme uploader Unrestricted file upload vulnerability in uploader.php in Uploader 1.1 allows remote attackers to... CVE-2003-1552 6.8 MediumDecember 31, 2003
• novell groupwise Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown... CVE-2003-1551 10.0 HighDecember 31, 2003
• xoops XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information... CVE-2003-1550 Public exploit 5.0 MediumDecember 31, 2003
• myabracadaweb Cross-site scripting (XSS) vulnerability in header.php in MyABraCaDaWeb 1.0.2 and earlier allows... CVE-2003-1549 4.3 MediumDecember 31, 2003
• myabracadaweb MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to obtain sensitive information via an... CVE-2003-1548 Public exploit 5.0 MediumDecember 31, 2003
• francisco burzi php-nuke Cross-site scripting (XSS) vulnerability in block-Forums.php in the Splatt Forum module for PHP... CVE-2003-1547 4.3 MediumDecember 31, 2003
• filebased guestbook Cross-site scripting (XSS) vulnerability in gbook.php in Filebased guestbook 1.1.3 allows remote... CVE-2003-1546 4.3 MediumDecember 31, 2003
• nukestyles viewpage, phpnuke nukestyles viewpage module +1 more Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows... CVE-2003-1545 Public exploit 5.0 MediumDecember 31, 2003
• microsoft windows 2000 Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows... CVE-2003-1544 EPSS 17.3% 6.8 MediumDecember 31, 2003
• bajie java http server Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly... CVE-2003-1543 4.3 MediumDecember 31, 2003
• ondrej jombik phpwebfilemanager Directory traversal vulnerability in plugins/file.php in phpWebFileManager before 0.4.4 allows... CVE-2003-1542 5.0 MediumDecember 31, 2003
• planetmoon guestbook PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient... CVE-2003-1541 Public exploit 5.0 MediumDecember 31, 2003
• wfchat WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control... CVE-2003-1540 Public exploit 5.0 MediumDecember 31, 2003
• onedotoh simple file manager Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows... CVE-2003-1539 4.3 MediumDecember 31, 2003
• suse office server, linux, linux openexchange server +2 more susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does... CVE-2003-1538 6.4 MediumDecember 31, 2003
• postnuke software foundation postnuke Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to... CVE-2003-1537 5.0 MediumDecember 31, 2003
• dcp-portal Multiple cross-site scripting (XSS) vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1... CVE-2003-1536 Public exploit 4.3 MediumDecember 31, 2003
• justice media guestbook Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct... CVE-2003-1535 Public exploit 5.0 MediumDecember 31, 2003
• justice media guestbook Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote... CVE-2003-1534 4.3 MediumDecember 31, 2003
• phppass SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute... CVE-2003-1533 Public exploit 7.5 HighDecember 31, 2003
• julien desaunay phpmyshop SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute... CVE-2003-1532 Public exploit 7.5 HighDecember 31, 2003
• lilikoi ceilidh Cross-site scripting (XSS) vulnerability in testcgi.exe in Lilikoi Software Ceilidh 2.70 and... CVE-2003-1531 4.3 MediumDecember 31, 2003
• phpbb SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to... CVE-2003-1530 Public exploit 7.5 HighDecember 31, 2003
• seagull software systems j walk application server Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9,... CVE-2003-1529 5.0 MediumDecember 31, 2003
• fujitsu siemens networker nsr_shutdown in Fujitsu Siemens NetWorker 6.0 allows local users to overwrite arbitrary files via... CVE-2003-1528 7.2 HighDecember 31, 2003
• ibm internet security systems blackice defender, iss blackice server protection +1 more BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block... CVE-2003-1527 4.3 MediumDecember 31, 2003
• francisco burzi php-nuke PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such... CVE-2003-1526 5.0 MediumDecember 31, 2003
• my photo gallery photo gallery Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown... CVE-2003-1525 10.0 HighDecember 31, 2003
• pgpi pgpdisk PGPi PGPDisk 6.0.2i does not unmount a PGP partition when the switch user function in Windows XP... CVE-2003-1524 6.3 MediumDecember 31, 2003
• dbmail SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute... CVE-2003-1523 7.5 HighDecember 31, 2003
• pscs vpop3 web mail server Cross-site scripting (XSS) vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows... CVE-2003-1522 Public exploit 4.3 MediumDecember 31, 2003
• sun java plug-in Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy... CVE-2003-1521 Public exploit 6.4 MediumDecember 31, 2003
• fuzzymonkey myclassifieds SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute... CVE-2003-1520 Public exploit 6.8 MediumDecember 31, 2003
• vivisimo clustering engine Cross-site scripting (XSS) vulnerability in Vivisimo clustering engine allows remote attackers to... CVE-2003-1519 Public exploit 4.3 MediumDecember 31, 2003
• adiscon winsyslog Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption)... CVE-2003-1518 Public exploit 7.8 HighDecember 31, 2003
• dansie shopping cart cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an... CVE-2003-1517 Public exploit 5.0 MediumDecember 31, 2003
• sun java plug-in The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed... CVE-2003-1516 Public exploit 6.8 MediumDecember 31, 2003
• origo asr-8100, asr-8400 +1 more Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not... CVE-2003-1515 7.8 HighDecember 31, 2003
• Show olderLoading…