cve.nowby Sazabi

CVEs published September 12, 2003

31 CVEs were published on September 12, 2003: 0 critical, 0 high.

Published: 31
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 31
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 31

CVE-2002-1352Per Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product prices by changing the prUnratedSep 12, 2003
CVE-2003-0528Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to executUnratedSep 12, 2003
CVE-2003-0541gtkhtml before 1.1.10, as used in Evolution, allows remote attackers to cause a denial of service (crash) via a malformed message that causeUnratedSep 12, 2003
CVE-2003-0703KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels or kernel modules, which allows local users to gain privileges UnratedSep 12, 2003
CVE-2003-0704KisMAC before 0.05d trusts user-supplied variables when chown'ing files or directories, which allows local users to gain privileges via the UnratedSep 12, 2003
CVE-2003-0705Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code.UnratedSep 12, 2003
CVE-2003-0706Unknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of service (tight loop).UnratedSep 12, 2003
CVE-2003-0715Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to executUnratedSep 12, 2003
CVE-2003-0720Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type.UnratedSep 12, 2003
CVE-2003-0721Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an emUnratedSep 12, 2003
CVE-2003-0760Blubster 2.5 allows remote attackers to cause a denial of service (crash) via a flood of connections to UDP port 701.UnratedSep 12, 2003
CVE-2003-0761Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for Asterisk releases befUnratedSep 12, 2003
CVE-2003-0762Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL (PATH_INUnratedSep 12, 2003
CVE-2003-0763Cross-site scripting (XSS) vulnerability in Escapade Scripting Engine (ESP) allows remote attackers to inject arbitrary script via the methoUnratedSep 12, 2003
CVE-2003-0764Escapade Scripting Engine (ESP) allows remote attackers to obtain sensitive path information via a malformed request, which leaks the informUnratedSep 12, 2003
CVE-2003-0765The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a laUnratedSep 12, 2003
CVE-2003-0766Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbUnratedSep 12, 2003
CVE-2003-0767Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and 0.27 and earlier forUnratedSep 12, 2003
CVE-2003-0768Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null chUnratedSep 12, 2003
CVE-2003-0769Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to insert arbitrary web scrUnratedSep 12, 2003
CVE-2003-0770FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, wUnratedSep 12, 2003
CVE-2003-0771Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arUnratedSep 12, 2003
CVE-2003-0772Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary codUnratedSep 12, 2003
CVE-2003-0773saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allowUnratedSep 12, 2003
CVE-2003-0774saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of servicUnratedSep 12, 2003
CVE-2003-0775saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has beenUnratedSep 12, 2003
CVE-2003-0776saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," wiUnratedSep 12, 2003
CVE-2003-0777saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent sUnratedSep 12, 2003
CVE-2003-0778saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allowUnratedSep 12, 2003
CVE-2003-0779SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary UnratedSep 12, 2003
CVE-2003-0780Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privilUnratedSep 12, 2003