Overview 3,747 matches · 35 in Waratek scope · 2 protected · 38 exploited · 1 CISA KEV · 1,196 public PoC · 91 EPSS ≥ 0.5
3,747matches
35in Waratek scope0.9%
2protected0.1%
38exploited1.0%
1CISA KEV0.0%
1,196public PoC31.9%
91EPSS ≥ 0.52.4%
Protected by Waratek
2
0.1%
Rule in development
0
0.0%
Mitigation candidate
6
0.2%
No exploit published
27
0.7%
Outside Waratek scope
19
0.5%
Not applicable
3,693
98.6%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
0.1%
partly blocked
0
0.0%
not blocked
3,745
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
38
1.0%
Working exploit published
1,164
31.1%
Proof of concept only
0
0.0%
Forecast only
5
0.1%
No public exploit
2,540
67.8%
split by
peak 1,023 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19892
Not applicable2
High2
not blocked2
No public exploit2
19908
Not applicable8
High8
not blocked8
No public exploit8
199111
Not applicable11
High11
not blocked11
Working exploit published2
No public exploit9
199212
Not applicable12
High12
not blocked12
No public exploit12
19938
Not applicable8
High8
not blocked8
No public exploit8
199414
Not applicable14
High14
not blocked14
Working exploit published3
No public exploit11
199517
Not applicable17
High17
not blocked17
Working exploit published2
No public exploit15
199643
No exploit published1
Not applicable42
High43
not blocked43
Working exploit published12
Forecast only1
No public exploit30
1997143
Not applicable143
High143
not blocked143
Exploited2
Working exploit published51
No public exploit90
1998137
Not applicable137
High137
not blocked137
Exploited1
Working exploit published33
No public exploit103
1999423
No exploit published2
Not applicable421
High423
not blocked423
Exploited2
Working exploit published132
No public exploit289
2000454
Mitigation candidate2
No exploit published3
Outside Waratek scope2
Not applicable447
High454
not blocked454
Exploited3
Working exploit published197
Forecast only1
No public exploit253
2001776
Protected by Waratek1
No exploit published6
Outside Waratek scope5
Not applicable764
High776
blocked by ARMR today1
not blocked775
Exploited11
Working exploit published219
No public exploit546
20021,023
Protected by Waratek1
Mitigation candidate2
No exploit published8
Outside Waratek scope8
Not applicable1,004
High1,023
blocked by ARMR today1
not blocked1,022
Exploited9
Working exploit published276
Forecast only3
No public exploit735
2003674
Mitigation candidate2
No exploit published7
Outside Waratek scope4
Not applicable661
High674
not blocked674
Exploited10
Working exploit published236
No public exploit428
19891991199319951997199920012003
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2003-1562 | High | 2003-12-31 | Not applicable | No public exploit | sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190. |
| CVE-2003-1557 | High | 2003-12-31 | Not applicable | No public exploit | Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows remote attackers to execute arbitrary code via email containing headers with leading "." characters. |
| CVE-2003-1551 | High | 2003-12-31 | Not applicable | No public exploit | Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script." |
| CVE-2003-1533 | High | 2003-12-31 | Not applicable | Working exploit published | SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameters. |
| CVE-2003-1532 | High | 2003-12-31 | Not applicable | Working exploit published | SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands via the (1) identifiant and (2) password parameters. |
| CVE-2003-1530 | High | 2003-12-31 | Not applicable | Working exploit published | SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the mark[] parameter. |
| CVE-2003-1528 | High | 2003-12-31 | Not applicable | No public exploit | nsr_shutdown in Fujitsu Siemens NetWorker 6.0 allows local users to overwrite arbitrary files via a symlink attack on the nsrsh[PID] temporary file. |
| CVE-2003-1525 | High | 2003-12-31 | Not applicable | No public exploit | Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown impact and attack vectors. |
| CVE-2003-1523 | High | 2003-12-31 | Not applicable | No public exploit | SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands via the (1) login username, (2) mailbox name, and possibly other attack vectors. |
| CVE-2003-1518 | High | 2003-12-31 | Not applicable | Working exploit published | Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog message. |
| CVE-2003-1515 | High | 2003-12-31 | Not applicable | No public exploit | Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a password, which allows remote attackers to cause a denial of service by restoring the factory defaults. |
| CVE-2003-1514 | High | 2003-12-31 | Not applicable | No public exploit | eMule 0.29c allows remote attackers to cause a denial of service (crash) via a long password, possibly due to a buffer overflow. |
| CVE-2003-1510 | High | 2003-12-31 | Not applicable | No public exploit | TinyWeb 1.9 allows remote attackers to cause a denial of service (CPU consumption) via a ".%00." in an HTTP GET request to the cgi-bin directory. |
| CVE-2003-1509 | High | 2003-12-31 | Not applicable | No public exploit | Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the default web browser. |
| CVE-2003-1507 | High | 2003-12-31 | Not applicable | No public exploit | Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default "superuser" account with the "planet" password, which allows remote attackers to gain administrative access. |
| CVE-2003-1504 | High | 2003-12-31 | Not applicable | Working exploit published | SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) vadmin_login or (2) vadmin_pass cookie in a request to goldlink.php. |
| CVE-2003-1503 | High | 2003-12-31 | Not applicable | No public exploit | Buffer overflow in AOL Instant Messenger (AIM) 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name. |
| CVE-2003-1496 | High | 2003-12-31 | Not applicable | No public exploit | Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unknown attack vectors. NOTE: due to lack of details in the vendor advisory, it is not clear whether this is the same issue as CVE-1999-0840. |
| CVE-2003-1495 | High | 2003-12-31 | Not applicable | No public exploit | Unspecified vulnerability in the non-SSL web agent in various HP Management Agent products allows local users or remote attackers to gain privileges or cause a denial of service via unknown attack vectors. |
| CVE-2003-1491 | High | 2003-12-31 | Not applicable | No public exploit | Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), which allows remote attackers to bypass the firewall filters via packets with a source port of 53. |
| CVE-2003-1490 | High | 2003-12-31 | Not applicable | No public exploit | SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long HTTP POST to the internal interface, possibly due to a buffer overflow. |
| CVE-2003-1487 | High | 2003-12-31 | Not applicable | No public exploit | Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program. |
| CVE-2003-1477 | High | 2003-12-31 | Not applicable | No public exploit | MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that either (1) is corrupt or (2) contains "embedded objects." |
| CVE-2003-1474 | High | 2003-12-31 | Not applicable | No public exploit | slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privileges to modify slashem-tty and execute arbitrary code as other users, as demonstrated using a separate vulnerability in LTris. |
| CVE-2003-1470 | High | 2003-12-31 | Not applicable | No public exploit | Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a CREATE command with a long mailbox name. |
| CVE-2003-1466 | High | 2003-12-31 | Not applicable | No public exploit | Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) register.php or (2) login.php. |
| CVE-2003-1464 | High | 2003-12-31 | Not applicable | No public exploit | Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service (disconnect and unavailable inbox) via a Short Message Service (SMS) message with a long image name. |
| CVE-2003-1461 | High | 2003-12-31 | Not applicable | Working exploit published | Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability (CVE-2002-1473). |
| CVE-2003-1458 | High | 2003-12-31 | Not applicable | No public exploit | SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL commands via the member name. |
| CVE-2003-1455 | High | 2003-12-31 | Not applicable | No public exploit | Multiple buffer overflows in the launch_bcrelay function in pptpctrl.c in PoPToP 1.1.4-b1 through PoPToP 1.1.4-b3 allow local users to execute arbitrary code. |
| CVE-2003-1449 | High | 2003-12-31 | Not applicable | No public exploit | Aladdin Knowlege Systems eSafe Gateway 3.5.126.0 does not check the entire stream of Content Vectoring Protocol (CVP) data, which allows remote attackers to bypass virus protection. |
| CVE-2003-1448 | High | 2003-12-31 | Not applicable | No public exploit | Memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service (SMB request hang) via a NetBIOS continuation packet. |
| CVE-2003-1442 | High | 2003-12-31 | Not applicable | Working exploit published | The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side. |
| CVE-2003-1435 | High | 2003-12-31 | Not applicable | Working exploit published | SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the days parameter to the search module. |
| CVE-2003-1432 | High | 2003-12-31 | Not applicable | No public exploit | Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file. |
| CVE-2003-1431 | High | 2003-12-31 | Not applicable | Working exploit published | Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (crash) via a long host string in the Unreal URL. |
| CVE-2003-1429 | High | 2003-12-31 | Not applicable | No public exploit | Buffer overflow in Proxomitron Naoko 4.4 allows remote attackers to execute arbitrary code via a long request. |
| CVE-2003-1425 | High | 2003-12-31 | Not applicable | Working exploit published | guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter. |
| CVE-2003-1422 | High | 2003-12-31 | Not applicable | No public exploit | Multiple unspecified vulnerabilities in the installer for SYSLINUX 2.01, when running setuid root, allow local users to gain privileges via unknown vectors. |
| CVE-2003-1407 | High | 2003-12-31 | Not applicable | Working exploit published | Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command. |
| CVE-2003-1406 | High | 2003-12-31 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in D-Forum 1.00 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the (1) my_header parameter to header.php3 or (2) my_footer parameter to footer.php3. |
| CVE-2003-1405 | High | 2003-12-31 | Not applicable | Working exploit published | DotBr 0.1 allows remote attackers to execute arbitrary shell commands via the cmd parameter to (1) exec.php3 or (2) system.php3. |
| CVE-2003-1404 | High | 2003-12-31 | Not applicable | No public exploit | DotBr 0.1 stores config.inc with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information such as SQL usernames and passwords. |
| CVE-2003-1403 | High | 2003-12-31 | Not applicable | No public exploit | foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function. |
| CVE-2003-1402 | High | 2003-12-31 | Not applicable | No public exploit | PHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the url_hit parameter, a different vulnerability than CVE-2006-5015. |
| CVE-2003-1398 | High | 2003-12-31 | Not applicable | No public exploit | Cisco IOS 12.0 through 12.2, when IP routing is disabled, accepts false ICMP redirect messages, which allows remote attackers to cause a denial of service (network routing modification). |
| CVE-2003-1395 | High | 2003-12-31 | Not applicable | No public exploit | Buffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a response to the ad server. |
| CVE-2003-1393 | High | 2003-12-31 | Not applicable | No public exploit | Buffer overflow in Gupta SQLBase 8.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long EXECUTE command. |
| CVE-2003-1391 | High | 2003-12-31 | Not applicable | No public exploit | RTS CryptoBuddy 1.0 and 1.2 uses a weak encryption algorithm for the passphrase and generates predictable keys, which makes it easier for attackers to guess the passphrase. |
| CVE-2003-1390 | High | 2003-12-31 | Not applicable | No public exploit | RTS CryptoBuddy 1.2 and earlier stores bytes 53 through 55 of a 55-byte passphrase in plaintext, which makes it easier for local users to guess the passphrase. |
| CVE-2003-1389 | High | 2003-12-31 | Not applicable | No public exploit | RTS CryptoBuddy 1.2 and earlier truncates long passphrases without warning the user, which may make it easier to conduct certain brute force guessing attacks. |
| CVE-2003-1388 | High | 2003-12-31 | Not applicable | No public exploit | Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension. |
| CVE-2003-1387 | High | 2003-12-31 | Not applicable | Working exploit published | Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username. |
| CVE-2003-1383 | High | 2003-12-31 | Not applicable | No public exploit | WEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP request for the logicworks.ini file, which contains the MySQL database username and password. |
| CVE-2003-1382 | High | 2003-12-31 | Not applicable | No public exploit | Buffer overflow in ISMail 1.4.3 and earlier allow remote attackers to execute arbitrary code via long domain names in (1) MAIL FROM or (2) RCPT TO fields. |
| CVE-2003-1380 | High | 2003-12-31 | Not applicable | No public exploit | Directory traversal vulnerability in BisonFTP Server 4 release 2 allows remote attackers to (1) list directories above the root via an 'ls @../' command, or (2) list files above the root via a "mget @../FILE" command. |
| CVE-2003-1378 | High | 2003-12-31 | Not applicable | Working exploit published | Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077. |
| CVE-2003-1377 | High | 2003-12-31 | Not applicable | No public exploit | Buffer overflow in the reverse DNS lookup of Smart IRC Daemon (SIRCD) 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname. |
| CVE-2003-1375 | High | 2003-12-31 | Not applicable | Working exploit published | Buffer overflow in wall for HP-UX 10.20 through 11.11 may allow local users to execute arbitrary code by calling wall with a large file as an argument. |
| CVE-2003-1367 | High | 2003-12-31 | Not applicable | No public exploit | The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command. |
| CVE-2003-1364 | High | 2003-12-31 | Not applicable | Working exploit published | Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service (crash) via an HTTP GET message with empty (1) Connection or (2) Range fields. |
| CVE-2003-1362 | High | 2003-12-31 | Not applicable | No public exploit | Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases. |
| CVE-2003-1361 | High | 2003-12-31 | Not applicable | No public exploit | Unknown vulnerability in VERITAS Bare Metal Restore (BMR) of Tivoli Storage Manager (TSM) 3.1.0 through 3.2.1 allows remote attackers to gain root privileges on the BMR Main Server. |
| CVE-2003-1360 | High | 2003-12-31 | Not applicable | No public exploit | Buffer overflow in the setupterm function of (1) lanadmin and (2) landiag programs of HP-UX 10.0 through 10.34 allows local users to execute arbitrary code via a long TERM environment variable. |
| CVE-2003-1359 | High | 2003-12-31 | Not applicable | Working exploit published | Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long command line argument. |
| CVE-2003-1358 | High | 2003-12-31 | Not applicable | Working exploit published | rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program. |
| CVE-2003-1357 | High | 2003-12-31 | Not applicable | No public exploit | ProxyView has a default administrator password of Administrator for Embedded Windows NT, which allows remote attackers to gain access. |
| CVE-2003-1356 | High | 2003-12-31 | Not applicable | No public exploit | The "file handling" in sort in HP-UX 10.01 through 10.20, and 11.00 through 11.11 is "incorrect," which allows attackers to gain access or cause a denial of service via unknown vectors. |
| CVE-2003-1355 | High | 2003-12-31 | Not applicable | Working exploit published | Buffer overflow in the remote console (rcon) in Battlefield 1942 1.2 and 1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long user name and password. |
| CVE-2003-1346 | High | 2003-12-31 | Not applicable | No public exploit | D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager. |
| CVE-2003-1343 | High | 2003-12-31 | Not applicable | Working exploit published | Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3". |
| CVE-2003-1341 | High | 2003-12-31 | Not applicable | Working exploit published | The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe. |
| CVE-2003-1339 | High | 2003-12-31 | Not applicable | Working exploit published | Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attackers to cause a denial of service (crash) or execute arbitrary code, as demonstrated via (1) a long GET request and (2) a long operation or autologin parameter to SwEzModule.dll. |
| CVE-2003-1337 | High | 2003-12-31 | Not applicable | No public exploit | Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. |
| CVE-2003-1336 | High | 2003-12-31 | Not applicable | Working exploit published | Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL. |
| CVE-2003-1333 | High | 2003-12-31 | Not applicable | No public exploit | Unspecified vulnerability in the Cache' Server Page (CSP) implementation in InterSystems Cache' 4.0.3 through 5.0.5 allows remote attackers to "gain complete control" of a server. |
| CVE-2003-1332 | High | 2003-12-31 | Not applicable | No public exploit | Stack-based buffer overflow in the reply_nttrans function in Samba 2.2.7a and earlier allows remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2003-0201. |
| CVE-2003-1329 | High | 2003-12-31 | Not applicable | No public exploit | ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial of service. |
| CVE-2003-1327 | High | 2003-12-31 | Not applicable | No public exploit | Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow when wu-ftpd constructs a notification message to the administrator. |
| CVE-2003-1322 | High | 2003-12-31 | Not applicable | No public exploit | Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrary code via a long (1) EXAMINE, (2) DELETE, (3) SUBSCRIBE, (4) RENAME, (5) UNSUBSCRIBE, (6) LIST, (7) LSUB, (8) STATUS, (9) LOGIN, (10) CREATE, or (11) SELECT command. |
| CVE-2003-1321 | High | 2003-12-31 | Not applicable | Working exploit published | Buffer overflow in Avant Browser 8.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request. |
| CVE-2003-1319 | High | 2003-12-31 | Not applicable | No public exploit | Multiple buffer overflows in SmartFTP 1.0.973, and other versions before 1.0.976, allow remote attackers to execute arbitrary code via (1) a long response to a PWD command, which triggers a stack-based overflow, and (2) a long line in a response to a file LIST command, which triggers a heap-based overflow. |
| CVE-2003-1318 | High | 2003-12-31 | Not applicable | Working exploit published | Twilight Webserver 1.3.3.0 allows remote attackers to cause a denial of service (application crash) via a GET request for a long URI, a different vulnerability than CVE-2004-2376. |
| CVE-2003-1315 | High | 2003-12-31 | Not applicable | No public exploit | SQL injection vulnerability in auth.php in Land Down Under (LDU) v601 and earlier allows remote attackers to execute arbitrary SQL commands. |
| CVE-2003-1314 | High | 2003-12-31 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook (EMGB) 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the emgb_admin_path parameter. |
| CVE-2003-1313 | High | 2003-12-31 | Not applicable | Working exploit published | Multiple PHP remote file inclusion vulnerabilities in EternalMart Mailing List Manager (EMLM) 1.32 allow remote attackers to execute arbitrary PHP code via a URL in (1) the emml_admin_path parameter to admin/auth.php or (2) the emml_path parameter to emml_email_func.php. |
| CVE-2003-1309 | High | 2003-12-31 | Not applicable | No public exploit | The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals (aka "Device Driver Attack"). |
| CVE-2003-1291 | High | 2003-12-31 | Not applicable | No public exploit | VMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root via certain modified VMware ESX Server environment variables. |
| CVE-2003-1286 | High | 2003-12-31 | Not applicable | Working exploit published | HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection: keep-alive" request before the proxy requests. |
| CVE-2003-1283 | High | 2003-12-31 | Not applicable | No public exploit | KaZaA Media Desktop (KMD) 2.0 launches advertisements in the Internet Explorer (IE) local security zone, which could allow remote attackers to view local files and possibly execute arbitrary code. |
| CVE-2003-1272 | High | 2003-12-31 | Not applicable | No public exploit | Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .b4s file containing (1) a long playlist name or (2) a long path in a file: argument to the Playstring parameter. |
| CVE-2003-1268 | High | 2003-12-31 | Not applicable | No public exploit | Multiple SQL injection vulnerabilities in (1) addcustomer.asp, (2) addprod.asp, and (3) process.asp in a.shopKart 2.0.3 allow remote attackers to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters. |
| CVE-2003-1260 | High | 2003-12-31 | Not applicable | Working exploit published | Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command. |
| CVE-2003-1259 | High | 2003-12-31 | Not applicable | No public exploit | Buffer overflow in CuteFTP 4.2 and 5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP server banner. |
| CVE-2003-1258 | High | 2003-12-31 | Not applicable | No public exploit | activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid. |
| CVE-2003-1253 | High | 2003-12-31 | Not applicable | No public exploit | PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to (1) dbase.php, (2) config.php, or (3) common.load.php. |
| CVE-2003-1252 | High | 2003-12-31 | Not applicable | Working exploit published | register.php in S8Forum 3.0 allows remote attackers to execute arbitrary PHP commands by creating a user whose name ends in a .php extension and entering the desired commands into the E-mail field, which creates a web-accessible .php file that can be called by the attacker, as demonstrated using a "system($cmd)" E-mail address with a "any_name.php" username. |
| CVE-2003-1251 | High | 2003-12-31 | Not applicable | Working exploit published | The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.php) scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via a c_path that references a URL on a remote web server that contains the code. |
| CVE-2003-1249 | High | 2003-12-31 | Not applicable | No public exploit | WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions. |
| CVE-2003-1248 | High | 2003-12-31 | Not applicable | No public exploit | H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode and (2) zipfile parameters in a URL request. |