Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2003
December

CVEs published in December 2003

484 vulnerabilities, 35 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

apple darwin streaming server, quicktime streaming server +1 moreDirectory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple...CVE-2003-1414Public exploit4.3 MediumDecember 31, 2003
apple darwin streaming server, quicktime streaming server +1 moreparse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the...CVE-2003-14134.3 MediumDecember 31, 2003
gonicus system administrationPHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0...CVE-2003-1412Public exploit6.8 MediumDecember 31, 2003
isoca cedric email readerPHP remote file inclusion vulnerability in emailreader_execute_on_each_page.inc.php in Cedric...CVE-2003-1411Public exploit6.8 MediumDecember 31, 2003
isoca cedric email readerPHP remote file inclusion vulnerability in email.php (aka email.php3) in Cedric Email Reader 0.2...CVE-2003-1410Public exploit6.8 MediumDecember 31, 2003
ej3 topoTOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with...CVE-2003-1409Public exploit5.0 MediumDecember 31, 2003
lotus domino serverLotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an...CVE-2003-14085.0 MediumDecember 31, 2003
microsoft windows ntBuffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via...CVE-2003-1407Public exploit7.2 HighDecember 31, 2003
adalis infomatique d forumPHP remote file inclusion vulnerability in D-Forum 1.00 through 1.11 allows remote attackers to...CVE-2003-1406Public exploit7.5 HighDecember 31, 2003
dotbr botbrDotBr 0.1 allows remote attackers to execute arbitrary shell commands via the cmd parameter to (1...CVE-2003-1405Public exploit7.5 HighDecember 31, 2003
dotbr botbrDotBr 0.1 stores config.inc with insufficient access control under the web document root, which...CVE-2003-14047.5 HighDecember 31, 2003
dotbr botbrfoo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct...CVE-2003-14037.5 HighDecember 31, 2003
kietuPHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers...CVE-2003-14027.5 HighDecember 31, 2003
php board boardlogin.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access...CVE-2003-1401Public exploit5.8 MediumDecember 31, 2003
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in the Your_Account module for PHP-Nuke 5.0 through 6.0...CVE-2003-1400Public exploit4.3 MediumDecember 31, 2003
ejecteject 2.0.10, when installed setuid on systems such as SuSE Linux 7.3, generates different error...CVE-2003-13991.9 LowDecember 31, 2003
cisco iosCisco IOS 12.0 through 12.2, when IP routing is disabled, accepts false ICMP redirect messages,...CVE-2003-13989.3 HighDecember 31, 2003
opera browserThe PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of...CVE-2003-1397Public exploit4.3 MediumDecember 31, 2003
opera browserHeap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial...CVE-2003-1396Public exploit6.8 MediumDecember 31, 2003
kazaa media desktopBuffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service ...CVE-2003-13959.0 HighDecember 31, 2003
coffeecup software password wizardCoffeeCup Software Password Wizard 4.0 stores sensitive information such as usernames and...CVE-2003-13945.0 MediumDecember 31, 2003
gupta technologies sqlbaseBuffer overflow in Gupta SQLBase 8.1.0 allows remote attackers to cause a denial of service and...CVE-2003-13938.5 HighDecember 31, 2003
research triangle software cryptobuddy, microsoft all windows +1 moreCryptoBuddy 1.0 and 1.2 does not use the user-supplied passphrase to encrypt data, which could...CVE-2003-13926.6 MediumDecember 31, 2003
research triangle software cryptobuddyRTS CryptoBuddy 1.0 and 1.2 uses a weak encryption algorithm for the passphrase and generates...CVE-2003-13917.5 HighDecember 31, 2003
research triangle software cryptobuddyRTS CryptoBuddy 1.2 and earlier stores bytes 53 through 55 of a 55-byte passphrase in plaintext,...CVE-2003-13907.5 HighDecember 31, 2003
research triangle software cryptobuddyRTS CryptoBuddy 1.2 and earlier truncates long passphrases without warning the user, which may...CVE-2003-13897.5 HighDecember 31, 2003
opera browserBuffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP...CVE-2003-13889.3 HighDecember 31, 2003
opera browserBuffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to...CVE-2003-1387Public exploitEPSS 14.7%7.5 HighDecember 31, 2003
axis 2400 video server, 2401 video server +1 moreAXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information...CVE-2003-1386Public exploit6.4 MediumDecember 31, 2003
invision power services power boardipchat.php in Invision Power Board 1.1.1 allows remote attackers to execute arbitrary PHP code,...CVE-2003-1385Public exploit6.8 MediumDecember 31, 2003
py software py-livredorCross-site scripting (XSS) vulnerability in index.php in PY-Livredor 1.0 allows remote attackers...CVE-2003-13844.3 MediumDecember 31, 2003
logicworks web erpWEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP...CVE-2003-13837.5 HighDecember 31, 2003
instantservers inc. ismailBuffer overflow in ISMail 1.4.3 and earlier allow remote attackers to execute arbitrary code via...CVE-2003-13827.5 HighDecember 31, 2003
amxmod.net amx modFormat string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life...CVE-2003-1381Public exploit6.8 MediumDecember 31, 2003
bisonftp server 4Directory traversal vulnerability in BisonFTP Server 4 release 2 allows remote attackers to (1)...CVE-2003-13807.5 HighDecember 31, 2003
point clark networks clarkconnectclarkconnectd in ClarkConnect Linux 1.2 allows remote attackers to obtain sensitive information...CVE-2003-13795.0 MediumDecember 31, 2003
microsoft outlook, outlook express +1 moreMicrosoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone,...CVE-2003-1378Public exploitEPSS 15.6%8.8 HighDecember 31, 2003
sircdBuffer overflow in the reverse DNS lookup of Smart IRC Daemon (SIRCD) 0.4.0 and 0.4.4 allows...CVE-2003-13778.3 HighDecember 31, 2003
winzipWinZip 8.0 uses weak random number generation for password protected ZIP files, which allows...CVE-2003-13764.6 MediumDecember 31, 2003
hp hp-uxBuffer overflow in wall for HP-UX 10.20 through 11.11 may allow local users to execute arbitrary...CVE-2003-1375Public exploit7.2 HighDecember 31, 2003
hp hp-uxBuffer overflow in disable of HP-UX 11.0 may allow local users to execute arbitrary code via a...CVE-2003-13744.6 MediumDecember 31, 2003
phpbb group phpbbDirectory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote...CVE-2003-13736.8 MediumDecember 31, 2003
myphpnukeCross-site scripting (XSS) vulnerability in links.php script in myPHPNuke 1.8.8, and possibly...CVE-2003-1372Public exploit4.3 MediumDecember 31, 2003
nuked-klanNuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive...CVE-2003-1371Public exploit4.3 MediumDecember 31, 2003
nuked-klanMultiple cross-site scripting (XSS) vulnerabilities in Nuked-Klan 1.2b allow remote attackers to...CVE-2003-13704.3 MediumDecember 31, 2003
save it software pty bytecatcherftpBuffer overflow in ByteCatcher FTP client 1.04b allows remote attackers to cause a denial of...CVE-2003-1369Public exploit6.8 MediumDecember 31, 2003
electrasoft ftp clientBuffer overflow in the 32bit FTP client 9.49.1 allows remote attackers to cause a denial of...CVE-2003-1368Public exploit6.4 MediumDecember 31, 2003
great circle associates majordomoThe which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set...CVE-2003-13677.8 HighDecember 31, 2003
openbsdchpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a...CVE-2003-1366Public exploit3.3 LowDecember 31, 2003
perl cgi liteThe escape_dangerous_chars function in CGI::Lite 2.0 and earlier does not correctly remove...CVE-2003-13655.0 MediumDecember 31, 2003
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open