Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2003
December

CVEs published in December 2003

484 vulnerabilities, 35 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

No product listedsiteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value...CVE-2003-13124.3 MediumDecember 31, 2003
No product listedsiteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET...CVE-2003-13116.8 MediumDecember 31, 2003
symantec norton antivirusThe DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus...CVE-2003-1310Public exploit4.6 MediumDecember 31, 2003
zonelabs zonealarmThe DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7...CVE-2003-130910.0 HighDecember 31, 2003
fvwmCRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before...CVE-2003-1308Public exploitFix available4.6 MediumDecember 31, 2003
apache http server** DISPUTED ** The mod_php module for the Apache HTTP Server allows local users with write...CVE-2003-1307Public exploitDisputed4.3 MediumDecember 31, 2003
No product listedMicrosoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to...CVE-2003-13062.6 LowDecember 31, 2003
No product listedMicrosoft Internet Explorer allows remote attackers to cause a denial of service (resource...CVE-2003-13055.0 MediumDecember 31, 2003
early impact productcartEarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with...CVE-2003-1304Public exploit5.0 MediumDecember 31, 2003
phpBuffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP...CVE-2003-1303EPSS 12.1%5.0 MediumDecember 31, 2003
phpThe IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service...CVE-2003-13025.0 MediumDecember 31, 2003
sun jreSun Java Runtime Environment (JRE) 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06, and as used in...CVE-2003-13015.0 MediumDecember 31, 2003
pablo software solutions baby ftp serverBaby FTP Server (BabyFTP) 1.2, and possibly other versions before May 31, 2003, allows remote...CVE-2003-13005.0 MediumDecember 31, 2003
pablo software solutions baby ftp serverDirectory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May...CVE-2003-12994.0 MediumDecember 31, 2003
anyportal php phpMultiple directory traversal vulnerabilities in siteman.php3 in AnyPortal(php) 12 MAY 00 allow...CVE-2003-12985.0 MediumDecember 31, 2003
No product listedEasy File Sharing (EFS) Web Server 1.2 stores the (1) option.ini (aka options.ini) file and (2)...CVE-2003-12975.0 MediumDecember 31, 2003
No product listedEasy File Sharing (EFS) Web Server 1.2 allows remote authenticated users to cause a denial of...CVE-2003-12965.0 MediumDecember 31, 2003
redhat enterprise linux, suse linux +1 moreUnspecified vulnerability in xscreensaver 4.12, and possibly other versions, allows attackers to...CVE-2003-1295Fix available2.1 LowDecember 31, 2003
xscreensaverXscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2)...CVE-2003-1294Fix available2.1 LowDecember 31, 2003
nukedweb guestbookhostMultiple cross-site scripting (XSS) vulnerabilities in NukedWeb GuestBookHost allow remote...CVE-2003-12934.3 MediumDecember 31, 2003
ashwebstudio ashnewsPHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to...CVE-2003-1292Public exploit5.0 MediumDecember 31, 2003
vmware esxVMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root...CVE-2003-12917.2 HighDecember 31, 2003
bea weblogic serverBEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup...CVE-2003-12905.0 MediumDecember 31, 2003
No product listedThe iBCS2 system call translator for statfs in NetBSD 1.5 through 1.5.3 and FreeBSD 4 up to 4.8...CVE-2003-12892.1 LowDecember 31, 2003
vserver linux-vserverMultiple race conditions in Linux-VServer 1.22 with Linux kernel 2.4.23 and SMP allow local users...CVE-2003-12885.0 MediumDecember 31, 2003
sambar serverSambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code...CVE-2003-12874.6 MediumDecember 31, 2003
sambar serverHTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny...CVE-2003-1286Public exploit7.5 HighDecember 31, 2003
sambar serverMultiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow...CVE-2003-12854.3 MediumDecember 31, 2003
No product listedSambar Server before 6.0 beta 6 allows remote attackers to obtain sensitive information via...CVE-2003-12845.0 MediumDecember 31, 2003
kazaa media desktopKaZaA Media Desktop (KMD) 2.0 launches advertisements in the Internet Explorer (IE) local...CVE-2003-12837.5 HighDecember 31, 2003
No product listedIBM Net.Data allows remote attackers to obtain sensitive information such as path names, server...CVE-2003-12825.0 MediumDecember 31, 2003
eekim cgihtmlcgihtml 1.69 allows local users to overwrite arbitrary files via a symlink attack on certain...CVE-2003-12812.1 LowDecember 31, 2003
eekim cgihtmlDirectory traversal vulnerability in cgihtml 1.69 allows remote attackers to overwrite and create...CVE-2003-12805.0 MediumDecember 31, 2003
No product listedS-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a...CVE-2003-12794.6 MediumDecember 31, 2003
infopop opentopicCross-site scripting vulnerability (XSS) in OpenTopic 2.3.1 allows remote attackers to execute...CVE-2003-1278Public exploit4.3 MediumDecember 31, 2003
yabbCross-site scripting (XSS) vulnerabilities in Yet Another Bulletin Board (YaBB) 1.5.0 allow...CVE-2003-12774.3 MediumDecember 31, 2003
nettelephoneNetfone.exe of NetTelephone 3.5.6 uses weak encryption for user PIN's and stores user account...CVE-2003-12764.6 MediumDecember 31, 2003
microsoft pocket iePocket Internet Explorer (PIE) 3.0 allows remote attackers to cause a denial of service (crash)...CVE-2003-1275Public exploitEPSS 16.7%5.0 MediumDecember 31, 2003
nullsoft winampWinamp 3.0 allows remote attackers to cause a denial of service (crash) via .b4s file with a file...CVE-2003-12745.0 MediumDecember 31, 2003
nullsoft winampWinamp 3.0 allows remote attackers to cause a denial of service (crash) via a .b4s file with a...CVE-2003-12732.1 LowDecember 31, 2003
nullsoft winampMultiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service ...CVE-2003-12729.3 HighDecember 31, 2003
an an-httpCross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute...CVE-2003-1271Public exploit4.3 MediumDecember 31, 2003
an an-httpAN HTTP 1.41e allows remote attackers to cause a denial of service (borken pipe) via an HTTP...CVE-2003-12705.0 MediumDecember 31, 2003
an an-httpAN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with...CVE-2003-12695.0 MediumDecember 31, 2003
urlogy a.shop.kartMultiple SQL injection vulnerabilities in (1) addcustomer.asp, (2) addprod.asp, and (3) process...CVE-2003-12687.5 HighDecember 31, 2003
steve poulsen guildftpdGuildFTPd 0.999 allows remote attackers to cause a denial of service (crash) via a GET request...CVE-2003-12675.0 MediumDecember 31, 2003
etype eservThe (1) FTP, (2) POP3, (3) SMTP, and (4) NNTP servers in EServer 2.92 through 2.97, and possibly...CVE-2003-1266Public exploit5.0 MediumDecember 31, 2003
mozilla, netscape navigator +1 moreNetscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users...CVE-2003-12652.1 LowDecember 31, 2003
d-link di-614\+, longshine technologie wireless ethernet access point +1 moreTFTP server in Longshine Wireless Access Point (WAP) LCS-883R-AC-B, and in D-Link DI-614+ 2.0...CVE-2003-12645.0 MediumDecember 31, 2003
brown bear software icalICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service (crash) via a malformed...CVE-2003-1263Public exploit5.0 MediumDecember 31, 2003
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open