Skip to content

February 2003 · Band 4

Possible (1 to 10%)

9 CVEs

Each square is a CVE that EPSS puts between 1% and 10%.

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

  1. Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allow remote attackers to cause a denial of service (crash) an…CVE-2003-0060Mit · 5.6% likely

    Mit

  2. Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave serve…CVE-2003-0098Apcupsd · 5.1% likely

    Apcupsd

  3. Multiple buffer overflows in Hypermail 2 before 2.1.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code (1) via a long attachment filename t…CVE-2003-0057Hypermail · 4.9% likely
  4. Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.CVE-2003-0041Mit · 3.5% likely

    CWE-78Mit

  5. Unknown vulnerability in the directory parser for Direct Connect 4 Linux (dcgui) before 0.2.2 allows remote attackers to read files outside the sharelist.CVE-2003-0076Dcgui · 2.3% likely
  6. Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.CVE-2003-0049Apple · 1.8% likely

    Apple

  7. Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary code via the functions (1) debuglog, (2) errorlog, and (3)…CVE-2003-0074Plptools · 1.2% likely
  8. The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows administrators to cause a denial of service by modifying the SIP_AUTHENTICATE_SCHE…CVE-2002-0669Pingtel · 1.1% likely

    Pingtel

  9. Buffer overflow in secure locate (slocate) before 2.7 allows local users to execute arbitrary code via a long (1) -c or (2) -r command line argument.CVE-2003-0056Slocate · 1.1% likely

    Slocate

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.