2003

SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers t

Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection f

saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the

saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections,

saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain case

Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local

Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to inse

Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote

Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote

Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code.

Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-b

Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbi

Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for A

Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via

The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a

Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious se

Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and

KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels or kernel modules, which allows local users

KisMAC before 0.05d trusts user-supplied variables when chown'ing files or directories, which allows local users to gain

Per Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product price

gtkhtml before 1.1.10, as used in Evolution, allows remote attackers to cause a denial of service (crash) via a malforme

Unknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of service (tight loop).

Blubster 2.5 allows remote attackers to cause a denial of service (crash) via a flood of connections to UDP port 701.

Escapade Scripting Engine (ESP) allows remote attackers to obtain sensitive path information via a malformed request, wh

Cross-site scripting (XSS) vulnerability in Escapade Scripting Engine (ESP) allows remote attackers to inject arbitrary

Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary

Kdbg 1.1.0 through 1.2.8 does not check permissions of the .kdbgrc file, which allows local users to execute arbitrary c

Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via

The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Set

Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via

Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier ver

Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC and versions before 0.9.1

BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to ove

Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to exe

Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to e

Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute ar

Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote atta

Buffer overflow in the BR549.DLL ActiveX control for Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers

Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domai

Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, wh

up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsign

Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a lon

Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process H

The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and loc

Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers t

Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malform

Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Suit

Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, al

Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator

Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attacke