CVEs published in July 2002
147 vulnerabilities, 24 critical, 0 exploited.
- slrn development team slrnBuffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local...7.2 High
- postnuke software foundation postcalendarCross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and...7.5 High
- c-note squid auth ldap, padl software nss ldap, pam ldap +2 moreFormat string vulnerability in the logging() function in C-Note Squid LDAP authentication module ...7.5 High
- levcgi.com myguestbookCross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute...7.5 High
- vqsoft vqserverCross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers...7.5 High
- philip chinery chinerys guestbookCross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows...7.5 High
- greg roelofs libpngBuffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14,...5.0 Medium
- sco openserverFormat string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to...7.2 High
- squidFTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data...7.5 High
- linux kernelThe Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier...7.5 High
- gisle aas digest-md5An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5...7.5 High
- symantec norton internet security, norton personal firewall +1 moreBuffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton...7.5 High
- microsoft sql server, data engine +1 moreMultiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft...7.5 High
- microsoft sql server, data engine +1 moreSQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft...7.5 High
- microsoft sql server, data engine +1 moreBuffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000...7.5 High
- php firstpost firstpostarticle.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of...5.0 Medium
- microsoft windows 2000 terminal servicesMicrosoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other...7.5 High
- microsoft windows 2000Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old...4.6 Medium
- caldera openserverBuffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain...7.2 High
- jerrett taylor php imglistDirectory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read...5.0 Medium
- stefan frings sms server toolsSmsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary...10.0 High
- gnu fileutilsRace condition in the recursive (1) directory deletion and (2) directory move in GNU File...1.2 Low
- dave lawrence xtuxXTux allows remote attackers to cause a denial of service (CPU consumption) via random inputs in...5.0 Medium
- menasoft sphereserverMenasoft SPHERE server 0.99x and 0.5x allows remote attackers to cause a denial of service by...5.0 Medium
- red-m 1050ap lan acess pointRed-M 1050 (Bluetooth Access Point) PPP server allows bonded users to cause a denial of service...10.0 High
- red-m 1050ap lan acess pointRed-M 1050 (Bluetooth Access Point) publicizes its name, IP address, and other information in UDP...5.0 Medium
- red-m 1050ap lan acess pointThe web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based...7.5 High
- red-m 1050ap lan acess pointThe TFTP server for Red-M 1050 (Bluetooth Access Point) can not be disabled and makes it easier...10.0 High
- red-m 1050ap lan acess pointRed-M 1050 (Bluetooth Access Point) uses case insensitive passwords, which makes it easier for...10.0 High
- microsoft .net frameworkBuffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service ...10.0 High
- sgi mediamailMediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the...4.6 Medium
- yahoo messengerYahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as...7.5 High
- university of washington pineURL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands...7.5 High
- daniel barron dansguardianDansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex...7.5 High
- phpPHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute...7.5 High
- squidVulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow...5.0 Medium
- squidBuffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service ...7.5 High
- isc dhcpdFormat string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP...10.0 High
- freebsd, openbsd +1 morektrace in BSD-based operating systems allows the owner of a process with special privileges to...2.1 Low
- zopeZCatalog plug-in for Zope allows anonymous users to bypass access restrictions7.5 High
- zopeZope Server vulnerable to DoS via header injection5.0 Medium
- pgp desktop security, freeware, personal security +2 moreHeap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug...7.5 High
- apache tomcatCross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute...7.5 High
- caldera openunix, unixware, compaq tru64 +6 more +8 moreCDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a...7.2 High
- pingtel xpressaPingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an...7.2 High
- pingtel xpressaThe enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4...4.6 Medium
- pingtel xpressaPingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with...4.6 Medium
- pingtel xpressa firmwarePingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications...9.8 Critical
- pingtel xpressaThe web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows...7.5 High
- microsoft msde, sql server +1 moreThe registry key containing the SQL Server service account information in Microsoft SQL Server...7.2 High
- Show moreLoading…