10089 matches found
CVE-2003-0290
Memory leak in eServ 2.9x allows remote attackers to cause a denial of service memory exhaustion via a large number of connections, whose memory is not freed when the connection is terminated...
CVE-2003-0277
Directory traversal vulnerability in normalhtml.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via .. dot dot sequences in the file parameter...
CVE-2003-0286
Snitz Forums 2000 is vulnerable to an SQL injection in register.asp: the Email parameter is not sanitized, allowing remote attackers to execute stored procedures and potentially OS commands via SQL, including stored procedures like xp_cmdshell. Affected versions include before 3.4.03 and possibly...
CVE-2003-0281
CVE-2003-0281 describes a buffer overflow in Firebird 1.0.2 and earlier versions (and possibly other InterBase-based products) that can be triggered by a long INTERBASE environment variable when invoking gds_inet_server, gds_lock_mgr, or gds_drop. The underlying issue allows local users to execut...
CVE-2003-0217
Cross-site scripting XSS vulnerability in Neoteris Instant Virtual Extranet IVE 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script...
CVE-2003-0283
Phorum prior to 3.4.3 is affected by a cross-site scripting (XSS) vulnerability in which an attacker can inject arbitrary script/HTML via a message whose subject, author name, or author e-mail is preceded by a "<<" before a tag name. This affects the handling of user-supplied content and ca...
CVE-2003-0281
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling 1 gdsinetserver, 2 gdslockmgr, or 3 gdsdrop...
CVE-2003-0282
CVE-2003-0282 affects UnZip 5.50 and earlier and is a directory traversal vulnerability where invalid characters placed between two '.' characters are filtered to produce a '..' sequence, allowing overwriting of arbitrary files during archive extraction. Public references in multiple advisories (...
CVE-2003-0276
Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a GET request with a large number of / characters...
CVE-2003-0289
CVE-2003-0289 affects the cdrecord component of the cdRtools package (cdrecord, version 2.0). The vulnerability is a format-string issue in scsiopen.c (dev parameter) that enables local users to gain privileges. Public references note that this is a local-privilege-escalation vulnerability in cdr...
CVE-2003-0275
Vulnerability: YaBB SE 1.5.2’s SSI.php is exploitable via the sourcedir parameter, allowing remote attackers to reference a URL containing PHP code and execute it on the affected server. Impact: Partial confidentiality, integrity, and availability per CVSS 2.0 base metrics (5.1). Details: No expl...
CVE-2003-0288
IP Messenger for Win suffers a filename-length buffer overflow in the file/folder transfer mechanism (versions 2.00–2.02). The overflow occurs when saving an attached file with a long name, potentially allowing arbitrary code execution with the user’s privileges. The JVN entry confirms impact as ...
CVE-2003-0290
The CVE-2003-0290 issue affects eServ HTTP (eServ 2.9x). A memory leak in the HTTP connection handling allows remote attackers to cause a denial of service through a large number of connections, where memory is not freed when the connection ends. This vulnerability results in memory exhaustion an...
CVE-2003-0282
Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . dot characters, which are filtered and result in a ".." sequence...
CVE-2003-0115
Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check parameters that are passed during third party rendering, which could allow remote attackers to execute arbitrary web script, aka the "Third Party Plugin Rendering" vulnerability, a different vulnerability than CVE-2003-0233...
CVE-2003-0174
The LDAP name service nsd in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password...
CVE-2003-0213
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow...
CVE-2003-0233
Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via the Load method, a different vulnerability than CVE-2003-0115...
