Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
2,493 vulnerabilities · highest exploit probability first
- CVE-2004-0594Medium 5.1The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function…php · phpEPSS55%1 exploitPublished Jul 13, 2004
- CVE-2004-0397High 7.5Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command.subversion · subversionEPSS75%4 exploitsPublished Jul 7, 2004
- CVE-2004-0430Medium 5.1Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string…apple · mac os xEPSS41%4 exploitsPublished Jul 7, 2004
- CVE-2004-0627Critical 10.0MySQL: check_scramble_323 authentication bypass and buffer overflowmysql · mysqlEPSS70%1 exploitPublished Jul 5, 2004
- CVE-2004-0396High 7.5Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.cvs · cvsEPSS68%2 exploitsPublished Jun 14, 2004
- CVE-2003-1041High 7.5Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm…microsoft · internet explorerEPSS53%1 exploitPublished Jun 14, 2004
- CVE-2003-0533High 7.5Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote…microsoft · netmeetingEPSS85%4 exploitsPublished Jun 1, 2004
- CVE-2003-0719High 7.5Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute…microsoft · netmeetingEPSS81%3 exploitsPublished Jun 1, 2004
- CVE-2004-0389High 7.5RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.realnetworks · helix universal serverEPSS55%1 exploitPublished Jun 1, 2004
- CVE-2004-0120Medium 5.0The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.microsoft · windows 2000EPSS51%1 exploitPublished Jun 1, 2004
- CVE-2004-0184Medium 5.0Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an…tcpdump · tcpdumpEPSS60%1 exploitPublished May 4, 2004
- CVE-2004-0380Critical 10.0The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the…microsoft · outlook expressEPSS63%3 exploitsPublished May 4, 2004
- CVE-2004-0362High 7.5Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a…iss · blackice agent serverEPSS73%3 exploitsPublished Apr 15, 2004
- CVE-2004-0363High 7.5Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method.symantec · norton antispamEPSS67%2 exploitsPublished Apr 15, 2004
- CVE-2004-1060Medium 5.0Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low…icmp · icmpEPSS75%2 exploitsPublished Apr 12, 2004
- CVE-2004-1857Low 2.1Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a ..hp · web jetadminEPSS87%2 exploitsPublished Mar 24, 2004
- CVE-2004-0176Medium 5.0Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.ethereal group · etherealEPSS67%2 exploitsPublished Mar 4, 2004
- CVE-2003-0818High 7.5Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large…microsoft · windows ntEPSS82%4 exploitsPublished Mar 3, 2004
- CVE-2004-2086Medium 5.0Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a long query parameter.sambar · sambar serverEPSS75%3 exploitsPublished Feb 6, 2004
- CVE-2003-0990High 7.5The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field.EPSS29%2 exploitsPublished Jan 20, 2004
- CVE-2003-1336Critical 9.3Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.mirc · mircEPSS36%3 exploitsPublished Dec 31, 2003
- CVE-2003-1200High 7.5Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From parameter to Form2Raw.cgi.alt-n · mdaemonEPSS65%4 exploitsPublished Dec 29, 2003
- CVE-2003-0822High 7.5Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.microsoft · frontpage server extensionsEPSS83%3 exploitsPublished Dec 15, 2003
- CVE-2003-0812High 7.5Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the…microsoft · windows 2000EPSS82%5 exploitsPublished Dec 15, 2003
- CVE-2003-0714High 7.5The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange…microsoft · exchange serverEPSS78%3 exploitsPublished Nov 17, 2003
- CVE-2003-0717High 7.5The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.microsoft · windows ntEPSS61%4 exploitsPublished Nov 17, 2003
- CVE-2003-0831Critical 9.0ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files.proftpd project · proftpdEPSS58%3 exploitsPublished Nov 17, 2003
- CVE-2003-1141High 7.5Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515.network instruments · niprint lpd-lpr print serverEPSS68%2 exploitsPublished Nov 4, 2003
- CVE-2003-1192Critical 10.0Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request.truenorth software · ia webmail serverEPSS69%4 exploitsPublished Nov 3, 2003
- CVE-2003-0727Low 2.1Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.oracle · database serverEPSS68%9 exploitsPublished Oct 20, 2003
- CVE-2003-0347Critical 10.0Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.microsoft · visual basicEPSS55%1 exploitPublished Oct 20, 2003
- CVE-2003-0722Critical 10.0The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.sun · solarisEPSS89%3 exploitsPublished Sep 22, 2003
- CVE-2003-0772High 7.5Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments.ipswitch · ws ftp serverEPSS85%1 exploitPublished Sep 22, 2003
- CVE-2003-0780Critical 9.0Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.mysql · mysqlEPSS78%2 exploitsPublished Sep 10, 2003
- CVE-2003-0605High 7.5The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the RemoteGetClassObject interface that cause a NULL…microsoft · windows 2000EPSS59%10 exploitsPublished Aug 27, 2003
- CVE-2003-0352High 7.5Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.microsoft · windows ntEPSS98%4 exploitsPublished Aug 18, 2003
- CVE-2003-0558High 7.5Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request.leapware · leapftpEPSS56%3 exploitsPublished Aug 18, 2003
- CVE-2001-1410Medium 5.0Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering.microsoft · internet explorerEPSS51%1 exploitPublished Aug 18, 2003
- CVE-2003-0471High 7.5Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument.alt-n · webadminEPSS61%5 exploitsPublished Aug 7, 2003
- CVE-2003-0466Critical 9.8Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow,…redhat · wu ftpdEPSS78%5 exploitsPublished Jul 31, 2003
- CVE-2003-0349High 7.5Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to…microsoft · windows 2000EPSS80%4 exploitsPublished Jul 24, 2003
- CVE-2003-0344High 7.5Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.microsoft · internet explorerEPSS81%4 exploitsPublished Jun 16, 2003
- CVE-2003-0245Medium 5.0Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to…apache · http serverEPSS63%1 exploitPublished Jun 9, 2003
- CVE-2003-0264High 7.5Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.seattle lab software · slmailEPSS72%5 exploitsPublished May 27, 2003
- CVE-2003-0190Medium 5.0OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.openbsd · opensshEPSS77%3 exploitsPublished May 12, 2003
- CVE-2003-0213High 7.5ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.poptop · pptp serverEPSS71%6 exploitsPublished May 12, 2003
- CVE-2003-0220High 7.5Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet.kerio · personal firewall 2EPSS69%6 exploitsPublished May 12, 2003
- CVE-2003-0201Critical 10.0Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.samba · sambaEPSS85%16 exploitsPublished May 5, 2003
- CVE-2003-0132Medium 5.0A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed.apache · http serverEPSS87%2 exploitsPublished Apr 11, 2003
- CVE-2002-1143Medium 5.0Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fields and…microsoft · excelEPSS54%2 exploitsPublished Apr 11, 2003
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2004-0594 | The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function… php · php | Medium 5.1 | 55% | 1 exploit | |
| CVE-2004-0397 | Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command. subversion · subversion | High 7.5 | 75% | 4 exploits | |
| CVE-2004-0430 | Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string… apple · mac os x | Medium 5.1 | 41% | 4 exploits | |
| CVE-2004-0627 | MySQL: check_scramble_323 authentication bypass and buffer overflow mysql · mysql | Critical 10.0 | 70% | 1 exploit | |
| CVE-2004-0396 | Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines. cvs · cvs | High 7.5 | 68% | 2 exploits | |
| CVE-2003-1041 | Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm… microsoft · internet explorer | High 7.5 | 53% | 1 exploit | |
| CVE-2003-0533 | Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote… microsoft · netmeeting | High 7.5 | 85% | 4 exploits | |
| CVE-2003-0719 | Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute… microsoft · netmeeting | High 7.5 | 81% | 3 exploits | |
| CVE-2004-0389 | RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests. realnetworks · helix universal server | High 7.5 | 55% | 1 exploit | |
| CVE-2004-0120 | The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages. microsoft · windows 2000 | Medium 5.0 | 51% | 1 exploit | |
| CVE-2004-0184 | Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an… tcpdump · tcpdump | Medium 5.0 | 60% | 1 exploit | |
| CVE-2004-0380 | The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the… microsoft · outlook express | Critical 10.0 | 63% | 3 exploits | |
| CVE-2004-0362 | Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a… iss · blackice agent server | High 7.5 | 73% | 3 exploits | |
| CVE-2004-0363 | Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method. symantec · norton antispam | High 7.5 | 67% | 2 exploits | |
| CVE-2004-1060 | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low… icmp · icmp | Medium 5.0 | 75% | 2 exploits | |
| CVE-2004-1857 | Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. hp · web jetadmin | Low 2.1 | 87% | 2 exploits | |
| CVE-2004-0176 | Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors. ethereal group · ethereal | Medium 5.0 | 67% | 2 exploits | |
| CVE-2003-0818 | Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large… microsoft · windows nt | High 7.5 | 82% | 4 exploits | |
| CVE-2004-2086 | Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a long query parameter. sambar · sambar server | Medium 5.0 | 75% | 3 exploits | |
| CVE-2003-0990 | The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field. | High 7.5 | 29% | 2 exploits | |
| CVE-2003-1336 | Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL. mirc · mirc | Critical 9.3 | 36% | 3 exploits | |
| CVE-2003-1200 | Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From parameter to Form2Raw.cgi. alt-n · mdaemon | High 7.5 | 65% | 4 exploits | |
| CVE-2003-0822 | Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request. microsoft · frontpage server extensions | High 7.5 | 83% | 3 exploits | |
| CVE-2003-0812 | Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the… microsoft · windows 2000 | High 7.5 | 82% | 5 exploits | |
| CVE-2003-0714 | The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange… microsoft · exchange server | High 7.5 | 78% | 3 exploits | |
| CVE-2003-0717 | The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers to execute arbitrary code via a buffer overflow attack. microsoft · windows nt | High 7.5 | 61% | 4 exploits | |
| CVE-2003-0831 | ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files. proftpd project · proftpd | Critical 9.0 | 58% | 3 exploits | |
| CVE-2003-1141 | Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515. network instruments · niprint lpd-lpr print server | High 7.5 | 68% | 2 exploits | |
| CVE-2003-1192 | Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request. truenorth software · ia webmail server | Critical 10.0 | 69% | 4 exploits | |
| CVE-2003-0727 | Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions. oracle · database server | Low 2.1 | 68% | 9 exploits | |
| CVE-2003-0347 | Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter. microsoft · visual basic | Critical 10.0 | 55% | 1 exploit | |
| CVE-2003-0722 | The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets. sun · solaris | Critical 10.0 | 89% | 3 exploits | |
| CVE-2003-0772 | Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments. ipswitch · ws ftp server | High 7.5 | 85% | 1 exploit | |
| CVE-2003-0780 | Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field. mysql · mysql | Critical 9.0 | 78% | 2 exploits | |
| CVE-2003-0605 | The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the RemoteGetClassObject interface that cause a NULL… microsoft · windows 2000 | High 7.5 | 59% | 10 exploits | |
| CVE-2003-0352 | Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms. microsoft · windows nt | High 7.5 | 98% | 4 exploits | |
| CVE-2003-0558 | Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request. leapware · leapftp | High 7.5 | 56% | 3 exploits | |
| CVE-2001-1410 | Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering. microsoft · internet explorer | Medium 5.0 | 51% | 1 exploit | |
| CVE-2003-0471 | Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument. alt-n · webadmin | High 7.5 | 61% | 5 exploits | |
| CVE-2003-0466 | Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow,… redhat · wu ftpd | Critical 9.8 | 78% | 5 exploits | |
| CVE-2003-0349 | Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to… microsoft · windows 2000 | High 7.5 | 80% | 4 exploits | |
| CVE-2003-0344 | Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page. microsoft · internet explorer | High 7.5 | 81% | 4 exploits | |
| CVE-2003-0245 | Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to… apache · http server | Medium 5.0 | 63% | 1 exploit | |
| CVE-2003-0264 | Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server. seattle lab software · slmail | High 7.5 | 72% | 5 exploits | |
| CVE-2003-0190 | OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack. openbsd · openssh | Medium 5.0 | 77% | 3 exploits | |
| CVE-2003-0213 | ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow. poptop · pptp server | High 7.5 | 71% | 6 exploits | |
| CVE-2003-0220 | Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet. kerio · personal firewall 2 | High 7.5 | 69% | 6 exploits | |
| CVE-2003-0201 | Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code. samba · samba | Critical 10.0 | 85% | 16 exploits | |
| CVE-2003-0132 | A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed. apache · http server | Medium 5.0 | 87% | 2 exploits | |
| CVE-2002-1143 | Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fields and… microsoft · excel | Medium 5.0 | 54% | 2 exploits |
Showing 2,351–2,400 of 2,493
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.