CVE-2003-1496

CVE-2003-1496 concerns an unspecified local privilege escalation vulnerability in HP Tru64’s CDE dtmailpr (4.0F–5.1B). Connected data clarifies a related issue (CVE-1999-0840) with a documented buffer overflow in CDE dtmail and dtmailpr that enables local privilege gain via a long -f option. Whil...

CVE-2003-1506

The CVE-2003-1506 entry describes a Cross-site scripting (XSS) vulnerability in the web interface component dansguardian.pl of Adelix CensorNet 3.0 through 3.2 . The flaw allows remote attackers to run arbitrary script as another user by injecting HTML/script into the DENIEDURL parameter. The aff...

CVE-2003-1517

CVE-2003-1517 affects the Dansie cart: cart.pl permits an invalid db parameter to leak the installation path in an error message, enabling information disclosure. The available documents specify the vulnerable component and the leak, but do not include explicit exploit details or a remediation pa...

CVE-2003-1520

Technical details for CVE-2003-1520 are not publicly available in the provided documents. No concrete information on affected versions, root cause, or fixes is included. Monitor for updates.

CVE-2003-1524

PGPi PGPDisk 6.0.2i does not unmount a PGP partition when Windows XP switch-user is used, potentially allowing a local attacker to access data on another user’s PGP partition. Affected component: PGPDisk partition handling. Root cause: failure to unmount on session switch. Impact: local confident...

CVE-2003-1514

CVE-2003-1514 affects eMule 0.29c, where a remote attacker can trigger a denial of service (crash) by sending a long password, suggesting a potential buffer overflow in password handling. The description notes a network-vector attack with no authenticated access required. The connected documents ...

CVE-2003-1500

CVE-2003-1500 : PHP remote file inclusion in cpCommerce 0.5f’s _functions.php allows remote attackers to execute arbitrary code via the prefix parameter. The vulnerability is caused by insufficient validation in the function handling the prefix, enabling RFI and potential code execution. Public r...

CVE-2003-1516

The CVE-2003-1516 entry concerns the org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01. The flaw allows signed and unsigned applets to share variables, violating the Java security model and potentially enabling remote attackers to read or write data belonging to a sign...

CVE-2003-1505

Vulnerability summary (CVE-2003-1505): Microsoft Internet Explorer 6.0 is vulnerable to a remote denial of service (crash) by crafted HTML/CSS. Specifically, a page or HTML email containing a textarea inside a div whose scrollbar-base-color is modified via CSS and then moved can trigger the crash...

CVE-2003-1526

PHP-Nuke 7.0 is affected by CVE-2003-1526. The vulnerability allows remote attackers to reveal the installation path via crafted input (characters like ", ', or >) in the search field, causing an error message that discloses the path. Affected product/component: PHP-Nuke 7.0 (search functional...

CVE-2003-1508

CVE-2003-1508 affects mIRC 6.12. A buffer overflow occurs in the DCC get dialog: if the window is minimized and a long filename is opened, it may crash the application, enabling a remote denial-of-service. The available sources (NVD, CVE List) reiterate the same description without providing expl...

CVE-2003-1501

Technical details about CVE-2003-1501 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2003-1521

CVE-2003-1521 affects Sun Java Plug-In 1.4–1.4.2_02. The issue enables remote attackers to repeatedly access the floppy drive via createXmlDocument in the org.apache.crimson.tree.XmlDocument class, violating the Java security model. The connected Red Hat and CVE records confirm the same descripti...

CVE-2003-1513

CVE-2003-1513 concerns multiple XSS vulnerabilities in Caucho Technology Resin 2.0–2.1.2, exposed via example scripts (env.jsp, form.jsp, session.jsp, tictactoe.jsp with the move parameter, and guestbook.jsp with name/comment fields). The root cause is the failure to properly sanitize user-suppli...

CVE-2003-1498

CVE-2003-1498 is an XSS vulnerability in WRENSOFT Zoom Search Engine, affecting version 2.0 Build 1018 and earlier. The vulnerability arises from improper handling of the zoom_query parameter in search.php, allowing remote attackers to inject arbitrary web script or HTML. The available documents ...

CVE-2003-1522

PSCS VPOP3 Web Mail server versions 2.0e and 2.0f are affected by a cross-site scripting (XSS) vulnerability in the redirect parameter passed to admin/index.html. The issue allows remote attackers to inject arbitrary web script or HTML. The public descriptions consistently identify the affected p...

CVE-2003-1497

The CVE-2003-1497 entry affects Linksys BEFSX41, specifically the system log viewer. The documented vulnerability is a buffer overflow triggered by an HTTP request with a long Log_Page_Num parameter, which can cause a remote denial of service. Affected product/version: Linksys BEFSX41 firmware 1....

CVE-2003-1509

Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818–6.0.11.853 are affected by CVE-2003-1509. The issue allows remote attackers to execute arbitrary script in the local security zone by embedding a script in a temporary file before the temp file ...

CVE-2003-1502

CVE-2003-1502 affects mod_throttle 3.0. Local users with Apache privileges can access shared memory that points to a file writable by the Apache user, which could allow privilege escalation. The Red Hat advisory confirms the issue; no exploitation status or workaround is provided in the available...

CVE-2003-1519

The CVE-2003-1519 entry describes a Cross-site scripting (XSS) vulnerability in the Vivisimo clustering engine. Affected component is the search program’s query parameter, where user-supplied input can be returned to the browser and executed as script. The NVD metrics indicate a Medium severity (...