Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2003
December

CVEs published in December 2003

484 vulnerabilities, 35 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

http fetcher libraryBuffer overflow in the http_fetch function of HTTP Fetcher 1.0.0 and 1.0.1 allows remote...CVE-2003-12626.4 MediumDecember 31, 2003
globalscape cuteftpBuffer overflow in CuteFTP 5.0 and 5.0.1 allows local users to cause a denial of service (crash)...CVE-2003-12612.1 LowDecember 31, 2003
globalscape cuteftpBuffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long...CVE-2003-1260Public exploit7.6 HighDecember 31, 2003
No product listedBuffer overflow in CuteFTP 4.2 and 5.0 allows remote attackers to cause a denial of service ...CVE-2003-12597.5 HighDecember 31, 2003
versatilebulletinboardactivate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain...CVE-2003-12587.5 HighDecember 31, 2003
e-thenifind_theni_home.php in E-theni allows remote attackers to obtain sensitive system information via...CVE-2003-12575.0 MediumDecember 31, 2003
e-theniaff_liste_langue.php in E-theni allows remote attackers to execute arbitrary PHP code by...CVE-2003-1256Public exploit6.8 MediumDecember 31, 2003
active php bookmarks php bookmarksadd_bookmark.php in Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to add arbitrary...CVE-2003-12556.4 MediumDecember 31, 2003
No product listedActive PHP Bookmarks (APB) 1.1.01 allows remote attackers to execute arbitrary PHP code via (1)...CVE-2003-12545.0 MediumDecember 31, 2003
sangwan kim bookmark4uPHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute...CVE-2003-12537.5 HighDecember 31, 2003
kelli shaver s8forumregister.php in S8Forum 3.0 allows remote attackers to execute arbitrary PHP commands by creating...CVE-2003-1252Public exploit7.5 HighDecember 31, 2003
nx n x web content management system 2002The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as...CVE-2003-1251Public exploit7.5 HighDecember 31, 2003
efficient networks 5861 dsl routerEfficient Networks 5861 DSL router, when running firmware 5.3.80 configured to block incoming TCP...CVE-2003-12505.0 MediumDecember 31, 2003
businessobjects webintelligenceWebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to...CVE-2003-12497.5 HighDecember 31, 2003
positive software h-sphereH-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell...CVE-2003-12487.5 HighDecember 31, 2003
positive software h-sphereMultiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary...CVE-2003-1247Public exploit7.5 HighDecember 31, 2003
pedestal software integrity protection driverNtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows...CVE-2003-12462.1 LowDecember 31, 2003
No product listedindex2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request...CVE-2003-1245Public exploit10.0 HighDecember 31, 2003
phpbb group phpbbSQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote...CVE-2003-1244Public exploit7.5 HighDecember 31, 2003
No product listedCross-site scripting vulnerability (XSS) in Sage 1.0 b3 allows remote attackers to insert...CVE-2003-1243Public exploit4.3 MediumDecember 31, 2003
No product listedSage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a...CVE-2003-1242Public exploit5.0 MediumDecember 31, 2003
levcgi.com myguestbookCross-site scripting vulnerability (XSS) in (1) admin_index.php, (2) admin_pass.php, (3)...CVE-2003-12414.3 MediumDecember 31, 2003
cutephp cutenewsPHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute...CVE-2003-1240Public exploit7.5 HighDecember 31, 2003
wihphotoDirectory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to...CVE-2003-1239Public exploit5.0 MediumDecember 31, 2003
nuked-klanCross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote...CVE-2003-12385.8 MediumDecember 31, 2003
No product listedCross-site scripting vulnerability (XSS) in WWWBoard 2.0A2.1 and earlier allows remote attackers...CVE-2003-12374.3 MediumDecember 31, 2003
tanneMultiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows...CVE-2003-1236Public exploitEPSS 15.2%10.0 HighDecember 31, 2003
No product listedBRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via...CVE-2003-12355.0 MediumDecember 31, 2003
freebsdInteger overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to...CVE-2003-12343.6 LowDecember 31, 2003
pedestalsoftware integrity protection driverPedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers,...CVE-2003-12339.8 CriticalDecember 31, 2003
gnu emacsEmacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables...CVE-2003-1232Public exploit5.1 MediumDecember 31, 2003
ecw-shopCross-site scripting (XSS) vulnerability in index.php in ECW-Shop 5.5 allows remote attackers to...CVE-2003-12314.3 MediumDecember 31, 2003
No product listedThe implementation of SYN cookies (syncookies) in FreeBSD 4.5 through 5.0-RELEASE-p3 uses only 32...CVE-2003-12306.4 MediumDecember 31, 2003
oracle jre, sun java web start, jsse +2 moreX509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01...CVE-2003-12297.5 HighDecember 31, 2003
mathopdBuffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and...CVE-2003-1228Public exploitEPSS 14.1%7.5 HighDecember 31, 2003
gallery project galleryPHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on...CVE-2003-1227Public exploit7.5 HighDecember 31, 2003
bea weblogic serverBEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password...CVE-2003-12262.1 LowDecember 31, 2003
bea weblogic serverThe default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords...CVE-2003-12252.1 LowDecember 31, 2003
bea weblogic serverWeblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the...CVE-2003-12242.1 LowDecember 31, 2003
bea weblogic serverThe Node Manager for BEA WebLogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers...CVE-2003-12235.0 MediumDecember 31, 2003
bea weblogic serverBEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service ...CVE-2003-12225.0 MediumDecember 31, 2003
bea weblogic serverBEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request...CVE-2003-12215.0 MediumDecember 31, 2003
bea weblogic serverBEA WebLogic Server proxy plugin for BEA Weblogic Express and Server 6.1 through 8.1 SP 1 allows...CVE-2003-12205.0 MediumDecember 31, 2003
oscommerceCross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for...CVE-2003-1219Public exploit4.3 MediumDecember 31, 2003
maxwebportalThe default installation of MaxWebPortal 1.30 stores the portal database under the web document...CVE-2003-1213Public exploit7.5 HighDecember 31, 2003
No product listedMaxWebPortal 1.30 allows remote attackers to perform unauthorized actions by modifying hidden...CVE-2003-12127.5 HighDecember 31, 2003
No product listedCross-site scripting (XSS) vulnerability in search.asp for MaxWebPortal 1.30 and possibly earlier...CVE-2003-12116.8 MediumDecember 31, 2003
francisco burzi php-nukeMultiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow...CVE-2003-1210Public exploit7.5 HighDecember 31, 2003
monkey-project monkeyThe Post_Method function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a...CVE-2003-12095.0 MediumDecember 31, 2003
No product listedMultiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier...CVE-2003-12046.8 MediumDecember 31, 2003
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open