Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle e-business suiteUnknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to...CVE-2002-16665.0 MediumDecember 31, 2002
yahoo messengerBuffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a...CVE-2002-16657.5 HighDecember 31, 2002
yahoo messengerYahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another...CVE-2002-16646.4 MediumDecember 31, 2002
monkey-project monkeyThe Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers...CVE-2002-1663Public exploit5.0 MediumDecember 31, 2002
mambo site serverMultiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote...CVE-2002-16626.8 MediumDecember 31, 2002
leafnodeThe leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of...CVE-2002-16615.0 MediumDecember 31, 2002
jelsoft vbulletincalendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via...CVE-2002-1660Public exploitEPSS 11.1%7.5 HighDecember 31, 2002
iatek portalappuser_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id...CVE-2002-165910.0 HighDecember 31, 2002
apache http serverBuffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary...CVE-2002-16584.6 MediumDecember 31, 2002
postgresqlPostgreSQL uses the username for a salt when generating passwords, which makes it easier for...CVE-2002-16577.5 HighDecember 31, 2002
xqus x-newsX-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the...CVE-2002-1656Public exploit7.5 HighDecember 31, 2002
iplanet web server, netscape enterprise server +1 moreThe Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows...CVE-2002-16555.0 MediumDecember 31, 2002
iplanet web server, netscape enterprise server +1 moreiPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote...CVE-2002-16547.5 HighDecember 31, 2002
farm9 cryptcatFarm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which...CVE-2002-1653Fix available5.0 MediumDecember 31, 2002
mit cgiemailBuffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service...CVE-2002-1652Public exploit7.5 HighDecember 31, 2002
verity search97Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert...CVE-2002-16514.3 MediumDecember 31, 2002
squirrelmailThe spell checker plugin (check_me.mod.php) for SquirrelMail before 1.2.3 allows remote attackers...CVE-2002-16507.5 HighDecember 31, 2002
squirrelmailCross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows...CVE-2002-16494.3 MediumDecember 31, 2002
squirrelmailCross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3...CVE-2002-16487.5 HighDecember 31, 2002
slashcode.com slashThe quick login feature in Slash Slashcode does not redirect the user to an alternate URL when...CVE-2002-16475.0 MediumDecember 31, 2002
ssh secure shell for serversSSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the...CVE-2002-16467.5 HighDecember 31, 2002
oracle application serverCross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application...CVE-2002-16364.3 MediumDecember 31, 2002
oracle application serverThe Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location...CVE-2002-16355.0 MediumDecember 31, 2002
novell netwareNovell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive...CVE-2002-1634Public exploitEPSS 17.0%5.0 MediumDecember 31, 2002
qnx rtosMultiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long...CVE-2002-16334.6 MediumDecember 31, 2002
oracle application serverOracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to...CVE-2002-16326.4 MediumDecember 31, 2002
oracle application serverSQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS)...CVE-2002-16317.5 HighDecember 31, 2002
oracle application serverThe sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to...CVE-2002-16307.5 HighDecember 31, 2002
multi-tech proxyserverMulti-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200...CVE-2002-162910.0 HighDecember 31, 2002
mike spice mikes vote cgiDirectory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows...CVE-2002-16285.0 MediumDecember 31, 2002
mike spice quiz meDirectory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote...CVE-2002-16275.0 MediumDecember 31, 2002
mike spice my calendarDirectory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to...CVE-2002-16265.0 MediumDecember 31, 2002
macromedia flash playerMacromedia Flash Player 6 does not terminate connections when the user leaves the web page, which...CVE-2002-16255.0 MediumDecember 31, 2002
ibm lotus dominoBuffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows...CVE-2002-16245.0 MediumDecember 31, 2002
checkpoint vpn-1 firewall-1The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared...CVE-2002-1623EPSS 48.6%5.0 MediumDecember 31, 2002
ibm aixBuffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary...CVE-2002-16227.5 HighDecember 31, 2002
hp tru64Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1...CVE-2002-16177.2 HighDecember 31, 2002
linux kernelUnspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel...CVE-2002-157310.0 HighDecember 31, 2002
linux kernelSigned integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux...CVE-2002-157210.0 HighDecember 31, 2002
linux kernelThe linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers,...CVE-2002-15712.1 LowDecember 31, 2002
ehud gavron tracesrouteThe spray mode in traceroute-nanog (aka traceroute-ng) may allow local users to overwrite...CVE-2002-13874.6 MediumDecember 31, 2002
ehud gavron tracesrouteBuffer overflow in traceroute-nanog (aka traceroute-ng) may allow local users to execute...CVE-2002-13864.6 MediumDecember 31, 2002
mozilla bugzillaCross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2...CVE-2002-2260Fix available4.3 MediumDecember 30, 2002
sgi irix, sun solaris, sunos +2 moreUnknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI...CVE-2002-158410.0 HighDecember 27, 2002
typespeedBuffer overflow in typespeed 0.4.2 and earlier allows local users to gain privileges via long input.CVE-2002-1389Fix available4.6 MediumDecember 27, 2002
open webmail webmailopenwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code...CVE-2002-13857.2 HighDecember 26, 2002
apple cups, mac os x, debian linux +2 moreCommon Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return...CVE-2002-1372Fix available7.5 HighDecember 26, 2002
easy software products cups, apple mac os x +1 morefilters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly...CVE-2002-1371Fix available7.5 HighDecember 26, 2002
easy software products cups, apple mac os x +1 morejobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the...CVE-2002-1369Fix available10.0 HighDecember 26, 2002
easy software products cups, apple mac os x +1 moreCommon Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers...CVE-2002-1367Fix available10.0 HighDecember 26, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open