By publication date
Exploited and new serious CVEs: July 2003
5 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2003-0348No exploit | A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the lomicrosoft · windows media player | Medium6.4 | — | 19.9% | Jul 24, 2003 |
54Plan | CVE-2003-0349Weaponized | Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windowsmicrosoft · windows 2000 | High7.5 | — | 80.2% | Jul 24, 2003 |
42Plan | CVE-2003-0434Proof of concept | Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metachadobe · acrobat | High7.5 | — | 40.9% | Jul 24, 2003 |
24Monitor | CVE-2003-0446Proof of concept | Cross-site scripting (XSS) in Internet Explorer 5.5 and 6.0, possibly in a component that is also used by other Microsoft products, allows rmicrosoft · internet explorer | Medium4.3 | — | 22.9% | Jul 24, 2003 |
24Monitor | CVE-2003-0447Proof of concept | The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in the Local Zone via an microsoft · internet explorer | Medium5.1 | — | 13.6% | Jul 24, 2003 |
- CVE-2003-034831Monitor
A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the lo
MediumCVSS 6.4No exploitEPSS 19%microsoft · windows media playerJul 24, 2003
- CVE-2003-034954Plan
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows
HighCVSS 7.5WeaponizedEPSS 80%microsoft · windows 2000Jul 24, 2003
- CVE-2003-043442Plan
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metach
HighCVSS 7.5Proof of conceptEPSS 40%adobe · acrobatJul 24, 2003
- CVE-2003-044624Monitor
Cross-site scripting (XSS) in Internet Explorer 5.5 and 6.0, possibly in a component that is also used by other Microsoft products, allows r
MediumCVSS 4.3Proof of conceptEPSS 22%microsoft · internet explorerJul 24, 2003
- CVE-2003-044724Monitor
The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in the Local Zone via an
MediumCVSS 5.1Proof of conceptEPSS 13%microsoft · internet explorerJul 24, 2003