Overview 2,922 matches · 42 in Waratek scope · 3 protected · 8 exploited · 0 CISA KEV · 876 public PoC · 33 EPSS ≥ 0.5
2,922matches
42in Waratek scope1.4%
3protected0.1%
8exploited0.3%
0CISA KEV0.0%
876public PoC30.0%
33EPSS ≥ 0.51.1%
Protected by Waratek
3
0.1%
Rule in development
0
0.0%
Mitigation candidate
13
0.4%
No exploit published
26
0.9%
Outside Waratek scope
12
0.4%
Not applicable
2,868
98.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
3
0.1%
partly blocked
0
0.0%
not blocked
2,919
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
8
0.3%
Working exploit published
875
29.9%
Proof of concept only
0
0.0%
Forecast only
5
0.2%
No public exploit
2,034
69.6%
split by
peak 980 / year
19891
Not applicable1
Medium1
not blocked1
No public exploit1
19902
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
19914
Not applicable4
Medium4
not blocked4
No public exploit4
19920
19933
Not applicable3
Medium3
not blocked3
No public exploit3
199410
Not applicable10
Medium10
not blocked10
Working exploit published2
No public exploit8
19956
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
199621
Not applicable21
Medium21
not blocked21
Working exploit published5
No public exploit16
199789
Not applicable89
Medium89
not blocked89
Working exploit published18
No public exploit71
199885
Not applicable85
Medium85
not blocked85
Working exploit published11
No public exploit74
1999357
Outside Waratek scope1
Not applicable356
Medium357
not blocked357
Working exploit published119
No public exploit238
2000467
Mitigation candidate4
No exploit published3
Not applicable460
Medium467
not blocked467
Exploited2
Working exploit published195
No public exploit270
2001706
Mitigation candidate2
No exploit published4
Outside Waratek scope7
Not applicable693
Medium706
not blocked706
Exploited3
Working exploit published219
Forecast only2
No public exploit482
2002980
Protected by Waratek2
Mitigation candidate6
No exploit published15
Outside Waratek scope4
Not applicable953
Medium980
blocked by ARMR today2
not blocked978
Exploited3
Working exploit published246
Forecast only3
No public exploit728
2003191
Protected by Waratek1
Mitigation candidate1
No exploit published4
Not applicable185
Medium191
blocked by ARMR today1
not blocked190
Working exploit published57
No public exploit134
19891991199319951997199920012003
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2003-0273 | Medium | 2003-05-27 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT) 1.0 through 1.0.7 allows remote attackers to execute script via message bodies. |
| CVE-2003-0268 | Medium | 2003-05-27 | Not applicable | No public exploit | SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message. |
| CVE-2003-0267 | Medium | 2003-05-27 | Not applicable | No public exploit | ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an argument specifying the full path of the target file. |
| CVE-2003-0265 | Medium | 2003-05-27 | Not applicable | Working exploit published | Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed. |
| CVE-2003-0261 | Medium | 2003-05-27 | Not applicable | No public exploit | fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges. |
| CVE-2003-0260 | Medium | 2003-05-27 | Not applicable | No public exploit | Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and possibly reload) via a flood of malformed ICMP packets. |
| CVE-2003-0259 | Medium | 2003-05-27 | Not applicable | No public exploit | Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to cause a denial of service (reload) via a malformed SSH initialization packet. |
| CVE-2003-0244 | Medium | 2003-05-27 | Not applicable | No public exploit | The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged source addresses that cause a large number of hash table collisions. |
| CVE-2003-0239 | Medium | 2003-05-27 | Not applicable | No public exploit | icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT (Global Color Table) or an LCT (Local Color Table) after an Image Descriptor. |
| CVE-2003-0238 | Medium | 2003-05-27 | Not applicable | No public exploit | The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag. |
| CVE-2003-0337 | Medium | 2003-05-22 | Not applicable | No public exploit | The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by modifying the LSF_ENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSF_SERVERDIR to point to a malicious lim program, which lsadmin then executes. |
| CVE-2003-0336 | Medium | 2003-05-22 | Not applicable | Working exploit published | Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return (CR) character in a spoofed "Attachment Converted:" string, which is not properly handled by Eudora. |
| CVE-2003-0343 | Medium | 2003-05-21 | Not applicable | No public exploit | BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks. |
| CVE-2003-0341 | Medium | 2003-05-21 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Owl Intranet Engine 0.71 and earlier allows remote attackers to insert arbitrary script via the Search field. |
| CVE-2003-0338 | Medium | 2003-05-21 | Not applicable | Working exploit published | Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests. |
| CVE-2003-0342 | Medium | 2003-05-20 | Not applicable | No public exploit | BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges. |
| CVE-2003-0214 | Medium | 2003-05-12 | Not applicable | No public exploit | run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. |
| CVE-2003-0206 | Medium | 2003-05-12 | Not applicable | No public exploit | gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of service (crash) via (1) link or (2) title elements that contain multiple lines. |
| CVE-2003-0190 | Medium | 2003-05-12 | Not applicable | Working exploit published | OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack. |
| CVE-2003-0116 | Medium | 2003-05-12 | Not applicable | No public exploit | Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Modal dialogs, which allows remote attackers to read files on the local system via a web page containing script that creates a dialog and then accesses the target files, aka "Modal Dialog script execution." |
| CVE-2003-0114 | Medium | 2003-05-12 | Not applicable | No public exploit | The file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to automatically upload files from the local system via a web page containing a script to upload the files. |
| CVE-2003-0112 | Medium | 2003-05-12 | Not applicable | No public exploit | Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to be passed to a debugger. |
| CVE-2002-1562 | Medium | 2003-05-12 | Not applicable | No public exploit | Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. (dot dot) sequences in the Host: header. |
| CVE-2003-1146 | Medium | 2003-05-11 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the dir parameter. |
| CVE-2003-0211 | Medium | 2003-05-05 | Not applicable | Working exploit published | Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service (memory consumption) via a large number of rejected connections. |
| CVE-2003-0208 | Medium | 2003-05-05 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to insert arbitrary Javascript via the clickTAG field. |
| CVE-2003-0198 | Medium | 2003-05-05 | Not applicable | No public exploit | Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files. |
| CVE-2003-0163 | Medium | 2003-05-05 | Not applicable | No public exploit | decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte. |
| CVE-2003-0133 | Medium | 2003-05-05 | Not applicable | No public exploit | GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service (crash) via certain malformed messages. |
| CVE-2003-0110 | Medium | 2003-05-05 | Not applicable | No public exploit | The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, malformed packet to UDP port 1745. |
| CVE-2003-1070 | Medium | 2003-04-28 | Not applicable | No public exploit | Unknown vulnerability in rpcbind for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (rpcbind crash). |
| CVE-2002-1483 | Medium | 2003-04-22 | Not applicable | Working exploit published | db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot). |
| CVE-2002-1480 | Medium | 2003-04-22 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook pages, which is executed when the administrator deletes the entry. |
| CVE-2002-1479 | Medium | 2003-04-22 | Not applicable | No public exploit | Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges. |
| CVE-2002-1476 | Medium | 2003-04-22 | Not applicable | No public exploit | Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with the LC_ALL category, allows local attackers to execute arbitrary code via a user-controlled locale string that has more than 6 elements, which exceeds the boundaries of the new_categories category array, as exploitable through programs such as xterm and zsh. |
| CVE-2002-1475 | Medium | 2003-04-22 | Not applicable | No public exploit | Unknown vulnerability in the ARP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to "take over packets destined for another host" and cause a denial of service. |
| CVE-2002-1474 | Medium | 2003-04-22 | Not applicable | No public exploit | Unknown vulnerability or vulnerabilities in TCP/IP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to cause a denial of service. |
| CVE-2002-1473 | Medium | 2003-04-22 | Not applicable | Working exploit published | Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of service and possibly execute arbitrary code. |
| CVE-2002-1471 | Medium | 2003-04-22 | Not applicable | No public exploit | The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previously verifying a certificate, which could allow remote attackers to monitor or modify sessions via a man-in-the-middle attack. |
| CVE-2002-1467 | Medium | 2003-04-22 | Not applicable | No public exploit | Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3) a relative URL from a web archive (mht file). |
| CVE-2002-1464 | Medium | 2003-04-22 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in CafeLog b2 Weblog Tool allows remote attackers to insert arbitrary HTML or script via the GPC variable. |
| CVE-2003-1054 | Medium | 2003-04-16 | Not applicable | Working exploit published | mod_access_referer 1.0.2 allows remote attackers to cause a denial of service (crash) via a malformed Referer header that is missing a hostname, as parsed by the ap_parse_uri_components function in Apache, which triggers a null dereference. |
| CVE-2003-0169 | Medium | 2003-04-11 | Not applicable | Working exploit published | hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service (CPU consumption) via a request to hpnst.exe that calls itself, which causes an infinite loop. |
| CVE-2003-0134 | Medium | 2003-04-11 | Not applicable | No public exploit | Unknown vulnerability in filestat.c for Apache running on OS2, versions 2.0 through 2.0.45, allows unknown attackers to cause a denial of service via requests related to device names. |
| CVE-2003-0132 | Medium | 2003-04-11 | Not applicable | Working exploit published | A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed. |
| CVE-2002-1443 | Medium | 2003-04-11 | Not applicable | No public exploit | The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeydown" event handler. |
| CVE-2002-1439 | Medium | 2003-04-11 | Not applicable | No public exploit | Unknown vulnerability related to stack corruption in the TGA daemon for HP-UX 11.04 (VVOS) Virtualvault 4.0, 4.5, and 4.6 may allow attackers to obtain access to system files. |
| CVE-2002-1438 | Medium | 2003-04-11 | Not applicable | No public exploit | The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option. |
| CVE-2002-1437 | Medium | 2003-04-11 | Not applicable | No public exploit | Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" (URL-encoded dot-dot backslash) sequences. |
| CVE-2002-1434 | Medium | 2003-04-11 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs. |
| CVE-2002-1433 | Medium | 2003-04-11 | Not applicable | No public exploit | Kerio MailServer 5.0 allows remote attackers to cause a denial of service (hang) via SYN packets to the supported network services. |
| CVE-2002-1432 | Medium | 2003-04-11 | Not applicable | Working exploit published | MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database. |
| CVE-2002-1430 | Medium | 2003-04-11 | Not applicable | No public exploit | Unknown vulnerability in Sympoll 1.2 allows remote attackers to read arbitrary files when register_globals is enabled, possibly by modifying certain PHP variables through URL parameters. |
| CVE-2002-1429 | Medium | 2003-04-11 | Not applicable | Working exploit published | Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter. |
| CVE-2002-1425 | Medium | 2003-04-11 | Not applicable | No public exploit | Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ (dot-dot) sequence in the filename to be extracted. |
| CVE-2002-1424 | Medium | 2003-04-11 | Not applicable | No public exploit | Buffer overflow in munpack in mpack 1.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code. |
| CVE-2002-1423 | Medium | 2003-04-11 | Not applicable | Working exploit published | tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter. |
| CVE-2002-1422 | Medium | 2003-04-11 | Not applicable | Working exploit published | admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters. |
| CVE-2002-1418 | Medium | 2003-04-11 | Not applicable | No public exploit | Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to cause a denial of service (ABEND) via a long module name. |
| CVE-2002-1417 | Medium | 2003-04-11 | Not applicable | No public exploit | Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to read arbitrary files via a URL containing a "..%5c" sequence (modified dot-dot), which is mapped to the directory separator. |
| CVE-2002-1416 | Medium | 2003-04-11 | Not applicable | No public exploit | The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for valid and invalid usernames during authentication, which makes it easier for remote attackers to conduct brute force attacks. |
| CVE-2002-1415 | Medium | 2003-04-11 | Not applicable | No public exploit | Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in SMTP requests. |
| CVE-2002-1414 | Medium | 2003-04-11 | Not applicable | Working exploit published | Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment variable. |
| CVE-2002-1411 | Medium | 2003-04-11 | Not applicable | No public exploit | Directory traversal vulnerability in update.dpgs in Duma Photo Gallery System (DPGS) 0.99.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the id parameter. |
| CVE-2002-1143 | Medium | 2003-04-11 | Not applicable | Working exploit published | Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure." |
| CVE-2003-0181 | Medium | 2003-04-02 | Not applicable | No public exploit | Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the s_Validation form with a long, unknown parameter name. |
| CVE-2003-0180 | Medium | 2003-04-02 | Not applicable | No public exploit | Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form. |
| CVE-2003-0165 | Medium | 2003-04-02 | Not applicable | Working exploit published | Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display. |
| CVE-2003-0160 | Medium | 2003-04-02 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser. |
| CVE-2003-0155 | Medium | 2003-04-02 | Not applicable | No public exploit | bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication. |
| CVE-2003-0154 | Medium | 2003-04-02 | Not applicable | Working exploit published | Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244. |
| CVE-2003-0153 | Medium | 2003-04-02 | Not applicable | Working exploit published | bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi. |
| CVE-2003-0141 | Medium | 2003-04-02 | Not applicable | No public exploit | The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length. |
| CVE-2003-0083 | Medium | 2003-04-02 | Not applicable | No public exploit | Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences, a different vulnerability than CVE-2003-0020. |
| CVE-2003-0082 | Medium | 2003-04-02 | Not applicable | No public exploit | The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun"). |
| CVE-2003-0072 | Medium | 2003-04-02 | Not applicable | No public exploit | The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array (aka "array overrun"). |
| CVE-2002-1561 | Medium | 2003-04-02 | Not applicable | Working exploit published | The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference. |
| CVE-2002-1528 | Medium | 2003-04-02 | Not applicable | No public exploit | MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter. |
| CVE-2002-1527 | Medium | 2003-04-02 | Not applicable | Working exploit published | emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error that includes the pathname in the resulting error message. |
| CVE-2002-1526 | Medium | 2003-04-02 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address field. |
| CVE-2002-1525 | Medium | 2003-04-02 | Not applicable | Working exploit published | Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or (3) an absolute pathname to port 6017. |
| CVE-2002-1523 | Medium | 2003-04-02 | Not applicable | No public exploit | Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via (1) ../ (dot-dot slash) or (2) ..\ (dot-dot backslash) sequences. |
| CVE-2002-1522 | Medium | 2003-04-02 | Not applicable | Working exploit published | Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument. |
| CVE-2002-1517 | Medium | 2003-04-02 | Not applicable | No public exploit | fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file. |
| CVE-2002-1516 | Medium | 2003-04-02 | Not applicable | No public exploit | rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2002-1515 | Medium | 2003-04-02 | Not applicable | No public exploit | Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) sequences in the img parameter. |
| CVE-2002-1513 | Medium | 2003-04-02 | Not applicable | Working exploit published | The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges. |
| CVE-2002-1512 | Medium | 2003-04-02 | Not applicable | Working exploit published | xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dscheck.dd temporary file. |
| CVE-2002-1507 | Medium | 2003-04-02 | Not applicable | No public exploit | Unreal Tournament 2003 (ut2003) clients and servers allow remote attackers to cause a denial of service via malformed messages containing a small number of characters to UDP ports 7778 or 10777. |
| CVE-2002-1504 | Medium | 2003-04-02 | Not applicable | No public exploit | Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a URL. |
| CVE-2002-1501 | Medium | 2003-04-02 | Not applicable | Working exploit published | The MPS functionality in Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10 allows remote attackers to cause a denial of service (crash) via multiple port scans to ports 15077 and 15078. |
| CVE-2002-1498 | Medium | 2003-04-02 | Not applicable | No public exploit | Directory traversal vulnerability in SWServer 2.2 and earlier allows remote attackers to read arbitrary files via a URL containing .. sequences with "/" or "\" characters. |
| CVE-2002-1497 | Medium | 2003-04-02 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response. |
| CVE-2002-1495 | Medium | 2003-04-02 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via (1) attached file names in the Read Mail feature, (2) text/html mails that are displayed in a pop-up window, and (3) certain malicious attributes within otherwise safe tags, such as onMouseOver. |
| CVE-2002-1494 | Medium | 2003-04-02 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or script by inserting the script after a trailing / character, which inserts the script into the resulting error message. |
| CVE-2002-1493 | Medium | 2003-04-02 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via (1) STYLE attributes or (2) SRC attributes in an IMG tag. |
| CVE-2002-1491 | Medium | 2003-04-02 | Not applicable | No public exploit | The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges. |
| CVE-2002-1488 | Medium | 2003-04-02 | Not applicable | Working exploit published | The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) via a PART message with (1) a missing channel or (2) a channel that the Trillian user is not in. |
| CVE-2002-1487 | Medium | 2003-04-02 | Not applicable | Working exploit published | The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messages (1) 206, (2) 211, (3) 213, (4) 214, (5) 215, (6) 217, (7) 218, (8) 243, (9) 302, (10) 317, (11) 324, (12) 332, (13) 333, (14) 352, and (15) 367. |
| CVE-2002-1485 | Medium | 2003-04-02 | Not applicable | No public exploit | The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service (crash) via certain strings such as "P > O < C". |