Vulnerabilities > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2003-12-31 | CVE-2003-1483 | Cryptographic Issues vulnerability in Flashfxp 1.4 FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access. | 6.4 |
2003-12-31 | CVE-2003-1482 | Credentials Management vulnerability in Microsoft Mn-500 Wireless Base Station The backup configuration file for Microsoft MN-500 wireless base station stores administrative passwords in plaintext, which allows local users to gain access. | 4.6 |
2003-12-31 | CVE-2003-1481 | Information Exposure vulnerability in Stalker Communigate PRO CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer. | 5.8 |
2003-12-31 | CVE-2003-1480 | Cryptographic Issues vulnerability in multiple products MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods. | 4.3 |
2003-12-31 | CVE-2003-1479 | Cross-Site Scripting vulnerability in Darkwet Webcam XP 1.02.432/1.02.535 Cross-site scripting (XSS) vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary web script or HTML via the message field. | 4.3 |
2003-12-31 | CVE-2003-1478 | Buffer Errors vulnerability in KDE Konqueror 3.0.3 Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequence and a large number of CRLF sequences, as demonstrated using freeze.htm. | 4.3 |
2003-12-31 | CVE-2003-1475 | Improper Authentication vulnerability in Netbus 1.5/1.6/1.7 Netbus 1.5 through 1.7 allows more than one client to be connected at the same time, but only prompts the first connection for authentication, which allows remote attackers to gain access. | 6.8 |
2003-12-31 | CVE-2003-1473 | Buffer Errors vulnerability in Lgames Ltris 1.0.1 Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitrary code with gid "games" permission via a long HOME environment variable. | 4.6 |
2003-12-31 | CVE-2003-1472 | Buffer Errors vulnerability in 3D-Ftp 4.0 Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long banner. | 5.0 |
2003-12-31 | CVE-2003-1471 | Improper Input Validation vulnerability in Alt-N Mdaemon MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service (crash) via a (1) DELE or (2) UIDL with a negative number. | 6.3 |