Skip to content

June 2003 · Band 4

Possible (1 to 10%)

78 CVEs

Each square is a CVE that EPSS puts between 1% and 10%.

Every one of the 78 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter.CVE-2003-0436Mnogosearch · 9.7% likely

    Mnogosearch

  2. Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter.CVE-2003-0437Mnogosearch · 9.0% likely

    Mnogosearch

  3. Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check service, allows remote attackers to…CVE-2003-0470Symantec · 8.7% likely

    Symantec

  4. Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP (1) POST or (2)…CVE-2003-0409Brs · 8.0% likely

    Brs

  5. TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository con…CVE-2003-0482Gero Kohnert · 7.1% likely
  6. Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script…CVE-2003-0442Php · 7.0% likely

    PHP

  7. Buffer overflow in AnalogX Proxy 4.13 allows remote attackers to execute arbitrary code via a long URL to port 6588.CVE-2003-0410Analogx · 6.8% likely

    Analogx

  8. Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the add_name parameter in the add_acl m…CVE-2003-0488Kerio · 6.8% likely

    Kerio

  9. Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java System Web Server 6.1…CVE-2003-0413Sun · 6.7% likely

    Sun Microsystems

  10. Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP banner.CVE-2003-0371Prishtina Soft · 6.4% likely
  11. The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large numbe…CVE-2003-0364Redhat · 6.0% likely

    Red Hat

  12. Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrar…CVE-2003-0380Atftpd · 5.8% likely
  13. OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" a…CVE-2003-0386Openbsd · 5.8% likely

    Openbsd

  14. The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths,…CVE-2003-0429Ethereal Group · 4.8% likely

    Ethereal Group

  15. Cross-site scripting (XSS) vulnerability in member.php of XMBforum XMB 1.8.x (aka Partagium) allows remote attackers to insert arbitrary HTML and web script via the "member" param…CVE-2003-0375Xmb Forum · 4.5% likely

    Xmb Forum

  16. Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script via the Search parameter.CVE-2003-0492Snitz Communications · 4.3% likely

    Snitz Communications

  17. Cross-site scripting (XSS) vulnerability in index.cgi for Bandmin 1.4 allows remote attackers to insert arbitrary HTML or script via (1) the year parameter in a showmonth action,…CVE-2003-0416Bandmin · 4.3% likely
  18. Cistron RADIUS daemon (radiusd-cistron) 1.6.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large value in an NAS-Port…CVE-2003-0450Cistron · 4.2% likely
  19. Buffer overflow in FastTrack (FT) network code, as used in Kazaa 2.0.2 and possibly other versions and products, allows remote attackers to execute arbitrary code via a packet con…CVE-2003-0397Sharman Networks · 4.1% likely
  20. Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (memory consumption) via a certain NDR…CVE-2003-0428Ethereal Group · 4.0% likely

    Ethereal Group

  21. Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member parameter to member.php or (2) the actio…CVE-2003-0483Xmb Forum · 3.9% likely

    Xmb Forum

  22. password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modifi…CVE-2003-0494Snitz Communications · 3.8% likely

    Snitz Communications

  23. Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item.CVE-2003-0495Ledscripts.com · 3.8% likely
  24. The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.CVE-2003-0248Redhat · 3.7% likely

    Red Hat

  25. Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitra…CVE-2003-0391Amax Information Technologies · 3.5% likely

    Amax Information Technologies

  26. Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, as demonstrated usin…CVE-2003-0400Vignette · 3.5% likely

    Vignette

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.