Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: June 2003

19 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2002-1456
    33Monitor

    Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.

    HighCVSS 7.5Proof of conceptEPSS 11%

    khaled mardam-bey · mircJun 9, 2003

  • CVE-2002-1564
    23Monitor

    Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains scr

    MediumCVSS 5.0No exploitEPSS 11%

    microsoft · internet explorerJun 9, 2003

  • CVE-2003-0189
    25Monitor

    The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt f

    MediumCVSS 5.0No exploitEPSS 15%

    apache · http serverJun 9, 2003

  • CVE-2003-0223
    32Monitor

    Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0,

    MediumCVSS 6.8No exploitEPSS 17%

    microsoft · internet information serverJun 9, 2003

  • CVE-2003-0224
    45Plan

    Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web pa

    CriticalCVSS 10.0No exploitEPSS 18%

    microsoft · internet information servicesJun 9, 2003

  • CVE-2003-0225
    32Monitor

    The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when construct

    MediumCVSS 5.0No exploitEPSS 38%

    microsoft · internet information serverJun 9, 2003

  • CVE-2003-0226
    33Monitor

    Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request wit

    MediumCVSS 5.0Proof of conceptEPSS 43%

    microsoft · internet information servicesJun 9, 2003

  • CVE-2003-0227
    30Monitor

    The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Wind

    MediumCVSS 5.0Proof of conceptEPSS 34%

    microsoft · windows 2000Jun 9, 2003

  • CVE-2003-0240
    49Plan

    The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and m

    CriticalCVSS 10.0Proof of conceptEPSS 29%

    axis · 2100 network cameraJun 9, 2003

  • CVE-2003-0245
    39Monitor

    Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attac

    MediumCVSS 5.0Proof of conceptEPSS 63%

    apache · http serverJun 9, 2003

  • CVE-2003-0309
    45Plan

    Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web d

    HighCVSS 7.5Proof of conceptEPSS 49%

    microsoft · internet explorerJun 9, 2003

  • CVE-2003-0195
    23Monitor

    CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not

    MediumCVSS 5.0Proof of conceptEPSS 10%

    slackware · slackware linuxJun 16, 2003

  • CVE-2003-0270
    40Plan

    The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protect

    HighCVSS 7.6WeaponizedEPSS 10%

    apple · 802.11nJun 16, 2003

  • CVE-2003-0276
    23Monitor

    Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GET r

    MediumCVSS 5.0Proof of conceptEPSS 11%

    pi3 · pi3webJun 16, 2003

  • CVE-2003-0280
    44Plan

    Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long

    CriticalCVSS 10.0Proof of conceptEPSS 14%

    youngzsoft · cmailserverJun 16, 2003

  • CVE-2003-0282
    17Monitor

    Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two .

    LowCVSS 2.6Proof of conceptEPSS 21%

    info-zip · unzipJun 16, 2003

  • CVE-2003-0344
    54Plan

    Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters

    HighCVSS 7.5WeaponizedEPSS 81%

    microsoft · ieJun 16, 2003

  • CVE-2003-0407
    45Plan

    Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string.

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    gnome · batalla navalJun 30, 2003

  • CVE-2003-0411
    38Monitor

    Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase "

    HighCVSS 7.5Proof of conceptEPSS 25%

    oracle · sun one application serverJun 30, 2003