By publication date
Exploited and new serious CVEs: January 2004
7 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
34Monitor | CVE-2003-0963Proof of concept | Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary alexander v. lukyanov · lftp | High7.5 | — | 13.6% | Jan 5, 2004 |
33Monitor | CVE-2003-0995No exploit | Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a denial of service (RPC service crash) via amicrosoft · windows 2000 | High7.5 | — | 10.0% | Jan 5, 2004 |
40Plan | CVE-2003-0990Weaponized | The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters squirrelmail · gpg plugin | High7.5 | — | 28.7% | Jan 20, 2004 |
25Monitor | CVE-2003-1025Proof of concept | Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the usermicrosoft · internet explorer · CWE-20 | Medium4.3 | — | 26.9% | Jan 20, 2004 |
49Plan | CVE-2003-1026Proof of concept | Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, whichmicrosoft · ie · CWE-264 | Critical9.3 | — | 39.2% | Jan 20, 2004 |
51Plan | CVE-2003-1027No exploit | Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windowmicrosoft · ie | Critical10.0 | — | 38.0% | Jan 20, 2004 |
26Monitor | CVE-2003-1028No exploit | The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invmicrosoft · ie | Medium5.0 | — | 19.0% | Jan 20, 2004 |
- CVE-2003-096334Monitor
Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary
HighCVSS 7.5Proof of conceptEPSS 13%alexander v. lukyanov · lftpJan 5, 2004
- CVE-2003-099533Monitor
Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a denial of service (RPC service crash) via a
HighCVSS 7.5No exploitEPSS 10%microsoft · windows 2000Jan 5, 2004
- CVE-2003-099040Plan
The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters
HighCVSS 7.5WeaponizedEPSS 28%squirrelmail · gpg pluginJan 20, 2004
- CVE-2003-102525Monitor
Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user
MediumCVSS 4.3Proof of conceptEPSS 26%microsoft · internet explorerJan 20, 2004
- CVE-2003-102649Plan
Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which
CriticalCVSS 9.3Proof of conceptEPSS 39%microsoft · ieJan 20, 2004
- CVE-2003-102751Plan
Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other window
CriticalCVSS 10.0No exploitEPSS 38%microsoft · ieJan 20, 2004
- CVE-2003-102826Monitor
The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an inv
MediumCVSS 5.0No exploitEPSS 19%microsoft · ieJan 20, 2004