CVE-2003-0737

The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to obtain the full pathname of phpWebSite via an invalid year, which generates an error from localtime in TimeZone.php of the Pear library...

CVE-2003-0661

The CVE-2003-0661 entry concerns the NetBIOS NBNS information disclosure vulnerability in Windows NT 4.0, 2000, XP, and Server 2003. The NBNS response may leak random memory contents from the target, potentially revealing sensitive data to remote attackers. Public details across connected documen...

CVE-2003-0734

Removed by vendor...

CVE-2003-0738

CVE-2003-0738 affects the calendar module of phpWebSite 0.9.x and earlier. A remote attacker can cause a denial of service (crash) by supplying a long year parameter. The CVSS data from NVD rates this as HIGH (7.8) with network access and low complexity. The connected documents do not specify a p...

CVE-2003-0666

Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data offset and data size parameters in a Corel WordPerfect file...

CVE-2003-0665

Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control...

CVE-2003-0733

The CVE-2003-0733 entry describes multiple cross-site scripting (XSS) vulnerabilities affecting WebLogic products: WebLogic Integration 7.0/2.0, Liquid Data 1.1, and WebLogic Server/Express 5.1–7.0. The root cause is XSS in the WebLogic Console and related servlet handling, allowing remote attack...

CVE-2003-0736

PhpWebSite 0.9.x and earlier contains multiple cross-site scripting (XSS) vulnerabilities in the Calendar, Fatcat, Pagemaster, and Site Search modules (and potentially other parameters). Exploitation could allow an attacker to execute arbitrary script in a user’s browser, potentially affecting gu...

CVE-2003-0740

Stunnel versions 4.00 and 3.24 and earlier are vulnerable due to leaking a privileged file descriptor returned by listen(), enabling local users to hijack the stunnel server. The issue is described across multiple advisories (Mandrake, Red Hat, SUSE) and CVE-2003-0740, with remediation guidance t...

CVE-2003-0739

VMware Workstation 4.0.1 for Linux, build 5289 and earlier, allows local users to delete arbitrary files via a symlink attack...

CVE-2003-0737

CVE-2003-0737 : The calendar module of phpWebSite 0.9.x and earlier allows remote attackers to obtain the full pathname of phpWebSite by triggering an error from localtime() in TimeZone.php (Pear library) via an invalid year. The issue is web-accessible (network vector) with no authentication, an...

CVE-2003-0736

Multiple cross-site scripting XSS vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via 1 the day parameter in the calendar module, 2 the fatcatid parameter in the fatcat module, 3 the PAGEid parameter in the pagemaster module, 4 the PDAlimit...

CVE-2003-0347

Vulnerability CVE-2003-0347 affects Microsoft Visual Basic for Applications (VBA) 5.0–6.3 via heap-based overflow in VBE.DLL and VBE6.DLL. An attacker could supply a document with a long ID parameter to cause remote code execution. Impact is remote compromise with user privileges; affected compon...

CVE-2003-0666

CVE-2003-0666 describes a buffer overflow in Microsoft WordPerfect Converter that allows remote code execution via crafted Corel WordPerfect files. The vulnerability arises from manipulated data offset and data size parameters in the converter. Impact is remote, with potential arbitrary code exec...

CVE-2003-0740

Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen, which allows local users to hijack the Stunnel server...

CVE-2003-0739

CVE-2003-0739 affects VMware Workstation 4.0.1 for Linux (build 5289 and earlier). The issue allows local users to delete arbitrary files via a symlink attack. Impact is described as PARTIAL for confidentiality, integrity, and availability, with local access and no authentication required. The ro...

CVE-2003-0734

Unknown vulnerability in the pamfilter mechanism in pamldap before version 162, when LDAP based authentication is being used, allows users to bypass host-based access restrictions and log onto the system...

CVE-2003-0735

CVE-2003-0735 affects phpWebSite 0.9.x and earlier, specifically the Calendar module. The root cause is insufficient input validation for calendar events, allowing SQL injection via user-controlled input (e.g., cal_template) and potentially enabling execution of arbitrary SQL with the PHPWebSite ...

CVE-2003-0630

CVE-2003-0630 affects the Atari 800 emulator (atari800), specifically the setuid program atari800.svgalib. Multiple buffer overflows in this component, present before version 1.2.2, allow local users to gain privileges via long command line arguments (demonstrated with -osa_rom). The issue is doc...

CVE-2003-0732

CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows a guest user to change the guest account to Admin on the Modify or delete users pages, potentially obtaining restricted information and administrative privileges. Affected component: CMF authentication/authorization on user-mana...