10089 matches found
CVE-2003-1086
PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pmpath parameter to reference a URL on a remote web server that contains the code...
CVE-2003-0344
Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / slash characters in the Type property of an Object tag in a web page...
CVE-2003-0371
Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service crash and possibly execute arbitrary code via a long FTP banner...
CVE-2003-0314
Snowblind Web Server 1.0 allows remote attackers to cause a denial of service crash via a URL that ends in a "/" sequence...
CVE-2003-0370
Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name CN field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack...
CVE-2003-0285
IBM AIX 5.2 and earlier distributes Sendmail with a configuration file sendmail.cf with the 1 promiscuousrelay, 2 acceptunresolvabledomains, and 3 acceptunqualifiedsenders features enabled, which allows Sendmail to be used as an open mail relay for sending spam e-mail...
CVE-2003-0288
Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file...
CVE-2003-0289
Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter...
CVE-2003-0310
Cross-site scripting XSS vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script...
CVE-2003-0284
Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus...
CVE-2003-0297
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service crash and possibly execute arbitrary code via certain large 1 literal and 2 mailbox size values that cause either integer signedness errors or integer overflow errors...
CVE-2003-0276
Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a GET request with a large number of / characters...
CVE-2003-0248
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address...
CVE-2003-0370
...
CVE-2003-0247
...
CVE-2003-0365
ICQLite 2003a creates the ICQ Lite directory with an ACE for "Full Control" privileges for Interactive Users, which allows local users to gain privileges as other users by replacing the executables with malicious programs...
CVE-2003-0282
Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . dot characters, which are filtered and result in a ".." sequence...
CVE-2003-0246
...