Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2003
December

CVEs published in December 2003

484 vulnerabilities, 35 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

advanced poll pollDirectory traversal vulnerability in Advanced Poll 2.0.2 allows remote attackers to read...CVE-2003-11807.5 HighDecember 31, 2003
advanced poll pollMultiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers...CVE-2003-1179Public exploit7.5 HighDecember 31, 2003
advanced poll pollEval injection vulnerability in comments.php in Advanced Poll 2.0.2 allows remote attackers to...CVE-2003-11787.5 HighDecember 31, 2003
atrium software mercur mailserverBuffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote...CVE-2003-1177Public exploitEPSS 12.9%7.5 HighDecember 31, 2003
bdc enterprises web wiz forumspost_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote...CVE-2003-1176Public exploit6.4 MediumDecember 31, 2003
synthetic reality sympollCross-site scripting (XSS) vulnerability in index.php in Sympoll 1.5 allows remote attackers to...CVE-2003-1175Public exploit6.8 MediumDecember 31, 2003
nullsoft shoutcast serverBuffer overflow in NullSoft Shoutcast Server 1.9.2 allows local users to cause a denial of...CVE-2003-1174Public exploit2.1 LowDecember 31, 2003
No product listedCentrinity FirstClass 7.1 allows remote attackers to access sensitive information by appending...CVE-2003-1173Public exploit5.0 MediumDecember 31, 2003
apache cocoonDirectory traversal vulnerability in the view-source sample file in Apache Software Foundation...CVE-2003-1172Public exploitEPSS 30.8%5.0 MediumDecember 31, 2003
mod security securityHeap-based buffer overflow in the sec_filter_out function in mod_security 1.7RC1 through 1.7.1 in...CVE-2003-11717.5 HighDecember 31, 2003
gernot stocker kpopupFormat string vulnerability in main.cpp in kpopup 0.9.1 and 0.9.5pre2 allows local users to cause...CVE-2003-11707.2 HighDecember 31, 2003
datev nutzungskontrolleDATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys,...CVE-2003-1169Public exploit4.6 MediumDecember 31, 2003
No product listedHTTP Commander 4.0 allows remote attackers to obtain sensitive information via an HTTP request...CVE-2003-11685.0 MediumDecember 31, 2003
gernot stocker kpopupmisc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local...CVE-2003-1167Public exploit7.2 HighDecember 31, 2003
http commander commanderDirectory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0...CVE-2003-1166Public exploit5.0 MediumDecember 31, 2003
brs webweaverBuffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of...CVE-2003-1165Public exploit5.0 MediumDecember 31, 2003
mldonkeyCross-site scripting (XSS) vulnerability in Mldonkey 2.5-4 allows remote attackers to inject...CVE-2003-1164Public exploit4.3 MediumDecember 31, 2003
ganglia gmondhash.c in Ganglia gmond 2.5.3 allows remote attackers to cause a denial of service (segmentation...CVE-2003-11635.0 MediumDecember 31, 2003
tritanium scripts bulletin boardindex.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to...CVE-2003-1162Public exploit5.0 MediumDecember 31, 2003
linux kernelexit.c in Linux kernel 2.6-test9-CVS, as stored on kernel.bkbits.net, was modified to contain a...CVE-2003-11617.2 HighDecember 31, 2003
plug and play software and play web serverMultiple buffer overflows in the FTP service in Plug and Play Web Server 1.0002c allow remote...CVE-2003-1158Public exploit5.0 MediumDecember 31, 2003
citrix metaframeCross-site scripting (XSS) vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows...CVE-2003-1157Public exploit4.3 MediumDecember 31, 2003
sun jre, jdk +1 moreJava Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows...CVE-2003-11564.6 MediumDecember 31, 2003
x-cd-roastX-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a...CVE-2003-11554.6 MediumDecember 31, 2003
clearswift mailsweeperMAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message...CVE-2003-11547.5 HighDecember 31, 2003
bytehoardbyteHoard 0.7 and 0.71 allows remote attackers to list arbitrary files and directories via a...CVE-2003-11535.0 MediumDecember 31, 2003
infrontech webtideWebTide 7.04 allows remote attackers to list arbitrary directories via an HTTP request for %3f...CVE-2003-11525.0 MediumDecember 31, 2003
yahoo messengerBuffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service ...CVE-2003-1135Public exploit2.6 LowDecember 31, 2003
sun javaSun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash),...CVE-2003-1134Public exploit2.1 LowDecember 31, 2003
ritlabs the batRit Research Labs The Bat! 1.0.11 through 2.0 creates new accounts with insecure ACLs, which...CVE-2003-11332.1 LowDecember 31, 2003
cisco content services switch 11000, content services switch 11500 +1 moreThe DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a...CVE-2003-11325.0 MediumDecember 31, 2003
activecampaign knowledgebuilderPHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as...CVE-2003-1131Public exploit7.5 HighDecember 31, 2003
yahoo audio conferencing activex controlBuffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45...CVE-2003-1129Public exploit2.6 LowDecember 31, 2003
x2 studios xmms remoteXMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7,...CVE-2003-11287.5 HighDecember 31, 2003
whale communications e-gapWhale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code...CVE-2003-11275.0 MediumDecember 31, 2003
sun one web serverUnknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows...CVE-2003-11265.0 MediumDecember 31, 2003
sun one directory serverUnknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP...CVE-2003-11255.0 MediumDecember 31, 2003
sun management\+centerUnknown vulnerability in Sun Management Center (SunMC) 2.1.1, 3.0, and 3.0 Revenue Release (RR),...CVE-2003-11244.6 MediumDecember 31, 2003
sun jre, jdk +1 moreSun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to...CVE-2003-1123Public exploitEPSS 11.1%7.5 HighDecember 31, 2003
scriptlogicScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS...CVE-2003-11222.1 LowDecember 31, 2003
No product listedServices in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at...CVE-2003-112110.0 HighDecember 31, 2003
ssh tectia serverRace condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin ...CVE-2003-11203.7 LowDecember 31, 2003
ssh secure shellSSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed...CVE-2003-11195.0 MediumDecember 31, 2003
university of california seti at homeBuffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause...CVE-2003-1118Public exploitEPSS 18.2%7.5 HighDecember 31, 2003
realnetworks realsystem proxy, realsystem server +1 moreBuffer overflow in RealSystem Server 6.x, 7.x and 8.x, and RealSystem Proxy 8.x, related to URL...CVE-2003-11177.5 HighDecember 31, 2003
oracle e-business suiteThe communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS)...CVE-2003-11165.0 MediumDecember 31, 2003
nortel succession communication server 2000The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication...CVE-2003-11157.5 HighDecember 31, 2003
mediatrix telecom voip access devices and gatewaysThe Session Initiation Protocol (SIP) implementation in Mediatrix Telecom VoIP Access Devices and...CVE-2003-11147.5 HighDecember 31, 2003
iptel sip express routerThe Session Initiation Protocol (SIP) implementation in IPTel SIP Express Router 0.8.9 and...CVE-2003-11137.5 HighDecember 31, 2003
ingate firewall, siparator +1 moreThe Session Initiation Protocol (SIP) implementation in Ingate Firewall and Ingate SIParator...CVE-2003-11127.5 HighDecember 31, 2003
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open