Cross-site scripting (XSS) vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows remote attackers to inject arbitrary web script or HTML via the (1) top_message parameter or (2) topic field of a new thread.
Max CVSS
6.8
EPSS Score
2.27%
Published
2003-10-30
Updated
2017-07-11
Cross-site scripting (XSS) vulnerability in Booby .1 through 0.2.3 allows remote attackers to inject arbitrary web script or HTML via the error message.
Max CVSS
6.8
EPSS Score
1.05%
Published
2003-10-30
Updated
2017-07-11
Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header.
Max CVSS
7.5
EPSS Score
2.37%
Published
2003-10-29
Updated
2017-07-11
FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes (//).
Max CVSS
10.0
EPSS Score
3.02%
Published
2003-10-30
Updated
2017-07-11
Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors.
Max CVSS
7.5
EPSS Score
12.61%
Published
2003-10-27
Updated
2017-07-11
Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allow remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter to (1) config.inc.php or (2) new-visitor.inc.php in common/visiteurs/include/.
Max CVSS
7.5
EPSS Score
5.52%
Published
2003-10-25
Updated
2017-07-11
Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05 allow remote attackers to cause a denial of service (crash or freeze) via a TCP packet with an invalid first parameter.
Max CVSS
7.5
EPSS Score
4.61%
Published
2003-10-30
Updated
2017-07-11
Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the configuration file.
Max CVSS
10.0
EPSS Score
0.28%
Published
2003-10-27
Updated
2017-07-11
lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack.
Max CVSS
7.5
EPSS Score
6.33%
Published
2003-10-06
Updated
2016-10-18
Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type.
Max CVSS
7.5
EPSS Score
0.63%
Published
2003-10-06
Updated
2016-10-18
Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user.
Max CVSS
7.5
EPSS Score
1.42%
Published
2003-10-06
Updated
2008-09-10
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
Max CVSS
9.8
EPSS Score
1.17%
Published
2003-10-07
Updated
2024-01-25
ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are not associated with an established connection, which could allow remote attackers to bypass intended filtering.
Max CVSS
7.5
EPSS Score
0.29%
Published
2003-10-06
Updated
2008-09-10
Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers.
Max CVSS
10.0
EPSS Score
0.29%
Published
2003-10-06
Updated
2008-09-10
Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges.
Max CVSS
7.2
EPSS Score
0.04%
Published
2003-10-06
Updated
2017-07-11
Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long command line argument.
Max CVSS
7.2
EPSS Score
0.04%
Published
2003-10-06
Updated
2016-10-18
Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privileges via a long command line argument.
Max CVSS
7.2
EPSS Score
0.04%
Published
2003-10-06
Updated
2017-07-11
Buffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creating long directory names and listing them with a LIST command.
Max CVSS
10.0
EPSS Score
1.22%
Published
2003-10-20
Updated
2008-09-10
nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication.
Max CVSS
7.5
EPSS Score
0.48%
Published
2003-10-20
Updated
2008-09-10
SQL injection vulnerability in global.php3 of AttilaPHP 3.0, and possibly earlier versions, allows remote attackers to bypass authentication via a modified cook_id parameter.
Max CVSS
7.5
EPSS Score
1.12%
Published
2003-10-20
Updated
2008-09-05
SQL injection vulnerability in pass_done.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the email parameter.
Max CVSS
7.5
EPSS Score
0.13%
Published
2003-10-20
Updated
2008-09-10
secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication by setting the adminpy parameter.
Max CVSS
7.5
EPSS Score
0.31%
Published
2003-10-20
Updated
2008-09-10
Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the ~service parameter.
Max CVSS
6.8
EPSS Score
94.51%
Published
2003-10-20
Updated
2008-09-05
SNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows remote attackers to gain privileges by decrypting the password that is returned by the server.
Max CVSS
10.0
EPSS Score
0.30%
Published
2003-10-20
Updated
2008-09-10
Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer.
Max CVSS
7.5
EPSS Score
12.90%
Published
2003-10-20
Updated
2016-10-18
58 vulnerabilities found
1 2 3
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!