Latest Vulnerabilities with Public Exploits

Updated 1h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

371,590 CVEs tracked 55,339 with exploits 5,152 exploited in wild 1,656 CISA KEV 4,275 Nuclei templates 56,399 vendors 49,617 researchers

55,339 results Clear all

CVE-2003-0849 3 PoCs Analysis EPSS 0.11

cfengine 2.x - Remote Code Execution via Modified Packet Length Values

Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.

Nov 17, 2003 STIX 2.1

CVE-2003-1142 1 PoC Analysis EPSS 0.06

Help in NIPrint LPD-LPR Print Server <4.10 - Privilege Escalation

Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, which allows local users to gain privileges.

Nov 03, 2003 STIX 2.1

CVE-2003-1145 1 PoC Analysis EPSS 0.04

OpenAutoClassifieds 1.0 - Cross-Site Scripting via friendmail.php listing parameter

Cross-site scripting (XSS) vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject arbitrary web script or HTML via the listing parameter.

Nov 03, 2003 STIX 2.1

CVE-2003-1146 1 PoC Analysis EPSS 0.03

Easy PHP Photo Album 1.0 - Cross-Site Scripting via dir Parameter

Cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the dir parameter.

May 11, 2003 STIX 2.1

CVE-2003-1174 2 PoCs Analysis EPSS 0.01

NullSoft Shoutcast Server 1.9.2 - Denial of Service via Long icy-name or icy-url Parameters

Buffer overflow in NullSoft Shoutcast Server 1.9.2 allows local users to cause a denial of service via (1) icy-name followed by a long server name or (2) icy-url followed by a long URL.

Dec 31, 2003 STIX 2.1

CVE-2003-1175 1 PoC Analysis EPSS 0.02

Sympoll 1.5 - Cross-Site Scripting via vo Parameter

Cross-site scripting (XSS) vulnerability in index.php in Sympoll 1.5 allows remote attackers to inject arbitrary web script or HTML via the vo parameter.

Dec 31, 2003 STIX 2.1

CVE-2003-1176 1 PoC Analysis EPSS 0.07

Web Wiz Forums <7.5 - Info Disclosure

post_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private forums by modifying the FID (forum ID) parameter.

Dec 31, 2003 STIX 2.1

CVE-2003-1182 1 PoC Analysis EPSS 0.02

MPM Guestbook 1.2 - Cross-Site Scripting via lng Parameter

Cross-site scripting (XSS) vulnerability in MPM Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the lng parameter.

Nov 03, 2003 STIX 2.1

CVE-2003-1196 1 PoC Analysis EPSS 0.01

VieBoard 2.6 - SQL Injection via forumid Parameter

SQL injection vulnerability in viewtopic.asp in VieBoard 2.6 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.

Nov 03, 2003 STIX 2.1

CVE-2003-1228 1 PoC Analysis EPSS 0.14

mathopd 1.2-1.5b13 - Buffer Overflow via Long HTTP Path

Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via an HTTP request with a long path.

CWE-120 Dec 31, 2003 STIX 2.1

CVE-2003-1187 1 PoC Analysis EPSS 0.04

phpkit 1.6.02-1.6.03 - Cross-Site Scripting via contact_email Parameter

Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the contact_email parameter.

Nov 02, 2003 STIX 2.1

CVE-2003-1165 1 PoC Analysis EPSS 0.06

BRS WebWeaver <= 1.06 - Buffer Overflow via Long User-Agent Header

Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with a long User-Agent header.

Dec 31, 2003 STIX 2.1

CVE-2003-1166 1 PoC Analysis EPSS 0.07

HTTP Commander 4.0 - Directory Traversal via File Parameter

Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. (dot dot) in the file parameter.

Dec 31, 2003 STIX 2.1

CVE-2003-1169 1 PoC Analysis EPSS 0.01

DATEV Nutzungskontrolle <2.3 - Privilege Escalation

DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by importing NukoInfo values in certain DATEV keys, which disables Nutzungskontrolle.

Dec 31, 2003 STIX 2.1

CVE-2003-1157 1 PoC Analysis EPSS 0.04

Citrix MetaFrame XP Server 1.0 - Cross-Site Scripting via NFuse_Message Parameter

Cross-site scripting (XSS) vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuse_Message parameter.

Dec 31, 2003 STIX 2.1

CVE-2003-1162 1 PoC Analysis EPSS 0.03

Tritanium Bulletin Board 1.2.3 - Info Disclosure

index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the thread_id, forum_id, and sid parameters.

Dec 31, 2003 STIX 2.1

CVE-2003-1164 1 PoC Analysis EPSS 0.02

mldonkey 2.5-4 - Cross-Site Scripting via URI

Cross-site scripting (XSS) vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page.

Dec 31, 2003 STIX 2.1

CVE-2003-0624 1 PoC Analysis EPSS 0.03

BEA WebLogic Server < 8.1 - Cross-Site Scripting via InteractiveQuery.jsp Person Parameter

Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter.

CWE-79 Dec 01, 2003 STIX 2.1

CVE-2003-0854 1 PoC Analysis EPSS 0.01

fileutils - Denial of Service via Large -w Value

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Nov 17, 2003 STIX 2.1

CVE-2003-1160 1 PoC Analysis EPSS 0.05

FlexWATCH Network video server 132 - Auth Bypass

FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes (//).

Oct 30, 2003 STIX 2.1

Latest Vulnerabilities with Public Exploits

Investigate

Ecosystems

Reference Indexes

Recent Blog Posts

CVEForge Labs

KEV Gaps