Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2003
December

CVEs published in December 2003

484 vulnerabilities, 35 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

siemens m45, s45 +1 moreBuffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of...CVE-2003-14647.8 HighDecember 31, 2003
alt-n webadminAbsolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows...CVE-2003-1463Public exploit3.5 LowDecember 31, 2003
mod survey surveymod_survey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a...CVE-2003-14625.0 MediumDecember 31, 2003
hp hp-uxBuffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a...CVE-2003-1461Public exploit7.2 HighDecember 31, 2003
ralf hoffmann worker filemanagerWorker Filemanager 1.0 through 2.7 sets the permissions on the destination directory to world...CVE-2003-14603.6 LowDecember 31, 2003
ttcms, ttcms ttforum +1 moreMultiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote...CVE-2003-1459Public exploit6.8 MediumDecember 31, 2003
ttcms, ttcms ttforum +1 moreSQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to...CVE-2003-14587.5 HighDecember 31, 2003
auerswald comsuite cti controlcenterAuerswald COMsuite CTI ControlCenter 3.1 creates a default "runasositron" user account with an...CVE-2003-14574.6 MediumDecember 31, 2003
mike bobbitt album.plAlbum.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative...CVE-2003-1456Public exploit5.0 MediumDecember 31, 2003
poptop pptp serverMultiple buffer overflows in the launch_bcrelay function in pptpctrl.c in PoPToP 1.1.4-b1 through...CVE-2003-14557.2 HighDecember 31, 2003
invision power services boardInvision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected,...CVE-2003-14545.0 MediumDecember 31, 2003
xoopsCross-site scripting (XSS) vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1...CVE-2003-1453Public exploit4.3 MediumDecember 31, 2003
qualcomm qpopperUntrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to...CVE-2003-1452Public exploit3.6 LowDecember 31, 2003
symantec norton antivirusBuffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary...CVE-2003-14516.4 MediumDecember 31, 2003
bitchxBitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service ...CVE-2003-1450Public exploit5.0 MediumDecember 31, 2003
aladdin knowledge systems esafe gatewayAladdin Knowlege Systems eSafe Gateway 3.5.126.0 does not check the entire stream of Content...CVE-2003-14497.5 HighDecember 31, 2003
microsoft windows 2000Memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service (SMB...CVE-2003-1448EPSS 15.4%7.8 HighDecember 31, 2003
ibm websphere application serverIBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64...CVE-2003-14471.9 LowDecember 31, 2003
rogueBuffer overflow in the save_into_file function in save.c for Rogue 5.2-2 allows local users to...CVE-2003-14464.9 MediumDecember 31, 2003
rarlab far managerStack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a...CVE-2003-1445Public exploit4.6 MediumDecember 31, 2003
kaspersky lab anti-virusKaspersky Antivirus (KAV) 4.0.9.0 allows local users to cause a denial of service (CPU...CVE-2003-14444.4 MediumDecember 31, 2003
kaspersky lab anti-virusKaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files with MS-DOS device names in...CVE-2003-14434.4 MediumDecember 31, 2003
ericsson hm220dp adsl modemThe web administration page for the Ericsson HM220dp ADSL modem does not require authentication,...CVE-2003-1442Public exploit7.5 HighDecember 31, 2003
posadisPosadis 0.50.4 through 0.50.8 allows remote attackers to cause a denial of service (crash) via a...CVE-2003-14414.3 MediumDecember 31, 2003
burton computer corporation spamprobeSpamProbe 0.8a allows remote attackers to cause a denial of service (crash) via HTML e-mail with...CVE-2003-14404.3 MediumDecember 31, 2003
silc secure internet live conferencingSecure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in...CVE-2003-14394.3 MediumDecember 31, 2003
bea weblogic serverRace condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, when using in-memory...CVE-2003-14384.3 MediumDecember 31, 2003
bea weblogic serverBEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a...CVE-2003-14372.1 LowDecember 31, 2003
crossnuke nukebrowserPHP remote file inclusion vulnerability in nukebrowser.php in Nukebrowser 2.1 to 2.5 allows...CVE-2003-1436Public exploit6.8 MediumDecember 31, 2003
francisco burzi php-nukeSQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary...CVE-2003-1435Public exploit7.5 HighDecember 31, 2003
pete werner login ldaplogin_ldap 3.1 and 3.2 allows remote attackers to initiate unauthenticated bind requests if (1)...CVE-2003-14346.8 MediumDecember 31, 2003
epic games unreal engineEpic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows...CVE-2003-14334.3 MediumDecember 31, 2003
epic games unreal engine, unreal tournament 2003 +1 moreEpic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service ...CVE-2003-143210.0 HighDecember 31, 2003
epic games unreal engineBuffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a...CVE-2003-1431Public exploit7.1 HighDecember 31, 2003
epic games unreal engineDirectory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote...CVE-2003-1430Public exploit5.0 MediumDecember 31, 2003
proxomitron naokoBuffer overflow in Proxomitron Naoko 4.4 allows remote attackers to execute arbitrary code via a...CVE-2003-14297.5 HighDecember 31, 2003
bharat mediratta galleryGallery 1.3.3 creates directories with insecure permissions, which allows local users to read,...CVE-2003-14284.8 MediumDecember 31, 2003
netgear fm114pDirectory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows...CVE-2003-1427Public exploit6.4 MediumDecember 31, 2003
cpanelOpenwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME...CVE-2003-14263.3 LowDecember 31, 2003
cpanelguestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the...CVE-2003-1425Public exploitEPSS 11.5%10.0 HighDecember 31, 2003
petitforummessage.php in Petitforum does not properly authenticate users, which allows remote attackers to...CVE-2003-14246.8 MediumDecember 31, 2003
petitforumPetitforum stores the liste.txt data file under the web document root with insufficient access...CVE-2003-14235.0 MediumDecember 31, 2003
gentoo syslinuxMultiple unspecified vulnerabilities in the installer for SYSLINUX 2.01, when running setuid root...CVE-2003-142210.0 HighDecember 31, 2003
suckbotUnspecified vulnerability in mod_mysql_logger shared object in SuckBot 0.006 allows remote...CVE-2003-14214.3 MediumDecember 31, 2003
opera browserCross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection...CVE-2003-14204.3 MediumDecember 31, 2003
netscape navigatorNetscape 7.0 allows remote attackers to cause a denial of service (crash) via a web page with an...CVE-2003-1419Public exploit4.3 MediumDecember 31, 2003
apache http serverApache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive...CVE-2003-14184.3 MediumDecember 31, 2003
ncipher support softwarenCipher Support Software 6.00, when using generatekey KeySafe to import keys, does not delete the...CVE-2003-14174.4 MediumDecember 31, 2003
bisonftp server 4BisonFTP Server 4 release 2 allows remote attackers to cause a denial of service (CPU consumption...CVE-2003-14164.3 MediumDecember 31, 2003
visual mining netcharts xbrl serverNetCharts XBRL Server 4.0.0 allows remote attackers to obtain sensitive information via an HTTP...CVE-2003-14156.8 MediumDecember 31, 2003
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open