10089 matches found
CVE-2003-1166
Directory traversal vulnerability in 1 Openfile.aspx and 2 Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. dot dot in the file parameter...
CVE-2003-1212
MaxWebPortal 1.30 allows remote attackers to perform unauthorized actions by modifying hidden form fields, such as the 1 news, 2 lock, or 3 allmem fields in the 'start new topic' HTML page...
CVE-2003-1232
Emacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables section of a text file, which allows user-assisted attackers to execute arbitrary commands, as demonstrated using the mode-name variable...
CVE-2003-1251
The 1 menu.inc.php, 2 datasets.php and 3 massoperations.inc.php mistakenly referred to as massopeations.inc.php scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via a cpath that references a URL on a remote web server that contains the code...
CVE-2003-1260
Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command...
CVE-2003-1262
Buffer overflow in the httpfetch function of HTTP Fetcher 1.0.0 and 1.0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a URL request via a long 1 host, 2 referer, or 3 userAgent value...
CVE-2003-1276
Netfone.exe of NetTelephone 3.5.6 uses weak encryption for user PIN's and stores user account numbers in plaintext in the HKEYCURRENTUSER\Software\MediaRing.com\SDK\NetTelephone\settings registry key, which could allow local users to gain unauthorized access to NetTelephone accounts...
CVE-2003-1279
S-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a symlink attack on 1 /tmp/F8499 by Sqpe, 2 /tmp/PRINT.$$.out by PRINT, 3 /tmp/SUBST$PID.TXT and /tmp/ed.cmds$PID by mustfix.hlinks, 4 /tmp/file.1 and /tmp/file.2 by sasget, 5 /tmp/file.1 by sasvars, an...
CVE-2003-1280
Directory traversal vulnerability in cgihtml 1.69 allows remote attackers to overwrite and create arbitrary files via a .. dot dot in multipart/form-data uploads...
CVE-2003-1283
KaZaA Media Desktop KMD 2.0 launches advertisements in the Internet Explorer IE local security zone, which could allow remote attackers to view local files and possibly execute arbitrary code...
CVE-2003-0363
Format string vulnerability in LICQ 1.2.6, 1.0.3 and possibly other versions allows remote attackers to perform unknown actions via format string specifiers...
CVE-2003-1082
Buffer overflow in utmpupdate for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a different vulnerability than CVE-2003-1068...
CVE-2003-1101
Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via invalid login credentials, which reveals the path in an error message...
CVE-2003-1134
Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service JVM crash, possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception...
CVE-2003-1164
Cross-site scripting XSS vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page...
CVE-2003-1170
Format string vulnerability in main.cpp in kpopup 0.9.1 and 0.9.5pre2 allows local users to cause a denial of service segmentation fault and possibly execute arbitrary code via format string specifiers in command line arguments...
CVE-2003-1209
The PostMethod function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service crash via a POST request without a Content-Type header...
CVE-2003-1226
BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in config.xml, filerealm.properties, and weblogic-rar.xml, which allows local users to learn those secrets and decrypt passwords...
CVE-2003-1244
SQL injection vulnerability in pageheader.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force user passwords and possibly gain unauthorized access to forums via the forumid parameter to index.php...