CVEs published in July 2002
147 vulnerabilities, 24 critical, 0 exploited.
- iplanet web serverBuffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6...7.5 High
- pingtel xpressaPingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require...4.6 Medium
- pingtel xpressaThe web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses...7.5 High
- pingtel xpressaPingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null...10.0 High
- pacific software carelloDirectory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on...7.5 High
- goahead software webserverCross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute...7.5 High
- orange software web server, goahead software webserver, montavista software hard hat linux +2 moreDirectory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read...5.0 Medium
- caldera openunix, unixware, compaq tru64 +6 more +8 moreCDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory...7.5 High
- microsoft data engine, sql server +1 moreThe installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates...4.6 Medium
- microsoft msde, sql server +1 moreBuffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL...7.5 High
- microsoft msde, sql server +1 moreBuffer overflow in the password encryption function of Microsoft SQL Server 2000, including...7.5 High
- apple mac os xSoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update,...7.5 High
- macromedia jrunMacromedia JRun Administration Server allows remote attackers to bypass authentication on the...10.0 High
- avaya cajun m770-atm, cajun p130, cajun p330 +2 moreAn undocumented SNMP read/write community string ('NoGaH$@!') in Avaya P330, P130, and M770-ATM...7.5 High
- trend micro interscan viruswallInterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail...7.5 High
- isc bindBuffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC...7.5 High
- openbsd opensshBuffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute...10.0 High
- openbsd opensshInteger overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute...9.8 Critical
- sgi irixUnknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local...7.2 High
- microsoft commerce serverBuffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows...7.5 High
- microsoft commerce serverThe Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows...7.5 High
- microsoft commerce serverBuffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce...5.0 Medium
- microsoft excel, office +1 moreThe Windows Media Active Playlist in Microsoft Windows Media Player 7.1 stores information in a...7.5 High
- freebsdMemory leak in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- sun solaris, sunos +1 moreFormat string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows...7.5 High
- oracle oracle9iOracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL...7.5 High
- oracle application serverOracle 9i Application Server allows remote attackers to bypass access restrictions for...7.5 High
- oracle database server, oracle8i, oracle9i +2 moreOracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to...7.5 High
- turnkey solutions sunshop shopping cartCross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain...7.5 High
- nullsoft winampCross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote...7.5 High
- cisco aironet ap340, aironet ap350 +1 moreCisco Aironet before 11.21 with Telnet enabled allows remote attackers to cause a denial of...5.0 Medium
- aprelium technologies abyss web serverDirectory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows...5.0 Medium
- openbsdmail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is...7.2 High
- demarc security puresecureDemarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL...10.0 High
- symantec raptor firewall, enterprise firewall, gateway security +1 more +3 moreFTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT...7.5 High
- phpgroupwarePHPGroupware 0.9.12 and earlier, when running with the magic_quotes_gpc feature disabled, allows...7.5 High
- apache http server, debian linux +1 moreApache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a...7.5 High
- microsoft windows media playerThe Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows...7.2 High
- microsoft windows media playerMicrosoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote...7.5 High
- microsoft windows nt, windows 2000, windows xp +2 moreBuffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and...7.2 High
- microsoft internet information server, internet information services +1 moreBuffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to...7.5 High
- sgi irixxfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call...10.0 High
- microsoft sql serverCross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an...7.5 High
- microsoft sql serverBuffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote...7.5 High
- modssl mod sslOff-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command...7.8 High
- sgi irixxfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell...7.5 High
- microsoft commerce serverBuffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers...5.0 Medium