Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: March 2004

16 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2003-0818
    55Plan

    Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and l

    HighCVSS 7.5WeaponizedEPSS 82%

    microsoft · windows 2000Mar 3, 2004

  • CVE-2003-0825
    41Plan

    The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly val

    CriticalCVSS 9.3No exploitEPSS 12%

    microsoft · windows 2000Mar 3, 2004

  • CVE-2004-0005
    42Plan

    Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) octal

    CriticalCVSS 9.8No exploitEPSS 11%

    gaim project · gaimMar 3, 2004

  • CVE-2004-0083
    46Plan

    Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary

    CriticalCVSS 10.0Proof of conceptEPSS 21%

    xfree86 project · x11r6Mar 3, 2004

  • CVE-2004-0084
    47Plan

    Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remot

    CriticalCVSS 10.0Proof of conceptEPSS 24%

    xfree86 project · x11r6Mar 3, 2004

  • CVE-2004-0097
    43Plan

    Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as d

    CriticalCVSS 10.0No exploitEPSS 10%

    openh323 project · pwlibMar 3, 2004

  • CVE-2004-0104
    38Monitor

    Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.

    HighCVSS 7.5Proof of conceptEPSS 26%

    metamail corporation · metamailMar 3, 2004

  • CVE-2004-1769
    50Plan

    The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attack

    CriticalCVSS 10.0Proof of conceptEPSS 34%

    cpanel · cpanelMar 11, 2004

  • CVE-2004-1770
    43Plan

    The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    cpanel · cpanelMar 11, 2004

  • CVE-2004-0110
    37Monitor

    Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execu

    HighCVSS 7.5Proof of conceptEPSS 24%

    xmlsoft · libxmlMar 15, 2004

  • CVE-2004-0189
    34Monitor

    The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00

    HighCVSS 7.5Proof of conceptEPSS 13%

    squid · squidMar 15, 2004

  • CVE-2004-1856
    29Monitor

    devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files

    MediumCVSS 5.0Proof of conceptEPSS 29%

    hp · web jetadminMar 24, 2004

  • CVE-2004-1857
    34Monitor

    Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files v

    LowCVSS 2.1Proof of conceptEPSS 86%

    hp · web jetadminMar 24, 2004

  • CVE-2003-0993
    33Monitor

    mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresse

    HighCVSS 7.5No exploitEPSS 10%

    apache · http serverMar 29, 2004

  • CVE-2004-0113
    23Monitor

    Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumptio

    MediumCVSS 5.0No exploitEPSS 11%

    apache · http serverMar 29, 2004

  • CVE-2004-0194
    33Monitor

    Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code

    HighCVSS 7.5Proof of conceptEPSS 10%

    adobe · acrobat readerMar 29, 2004