Skip to content

August 2003 · Band 3

Likely to be exploited (10% or more)

8 CVEs

Each square is a CVE that EPSS gives a 10% or higher chance of exploitation in the next 30 days.

likely to be exploited
8

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 throu…CVE-2003-0466Wuftpd · 78% likely

    CWE-193

  2. Buffer overflow in the BR549.DLL ActiveX control for Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to execute arbitrary code.CVE-2003-0530Microsoft · 30% likely

    Microsoft

  3. Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) allows remote attackers to execute arbitrary code via the Type…CVE-2003-0701Microsoft · 30% likely

    Microsoft

  4. Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser cache via crafted Content-Type and Cont…CVE-2003-0531Microsoft · 26% likely

    Microsoft

  5. Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to execute arbitrary code…CVE-2003-0532Microsoft · 23% likely

    Microsoft

  6. Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a br…CVE-2003-0353Microsoft · 22% likely

    Microsoft

  7. The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would g…CVE-2003-0540Wietse Venema · 21% likely
  8. Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative si…CVE-2003-0619Linux · 11% likely

    Linux

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.