Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft internet information servicesMicrosoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents...CVE-2002-1718EPSS 14.9%5.0 MediumDecember 31, 2002
microsoft internet information servicesMicrosoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information...CVE-2002-1717EPSS 16.1%5.0 MediumDecember 31, 2002
microsoft officeThe Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote...CVE-2002-1716EPSS 14.3%5.0 MediumDecember 31, 2002
ssh, ssh ssh2 +1 moreSSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such...CVE-2002-1715Public exploit7.2 HighDecember 31, 2002
microsoft ie, internet explorer +1 moreMicrosoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service ...CVE-2002-1714Public exploitEPSS 19.4%5.0 MediumDecember 31, 2002
mandrakesoft mandrake linuxThe Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home...CVE-2002-17135.5 MediumDecember 31, 2002
microsoft windows 2000, windows nt +1 moreMicrosoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption)...CVE-2002-1712Public exploitEPSS 25.8%5.0 MediumDecember 31, 2002
basilix webmailBasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local...CVE-2002-17112.1 LowDecember 31, 2002
basilix webmailThe attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the...CVE-2002-17103.6 LowDecember 31, 2002
basilix webmailSQL injection vulnerability in BasiliX Webmail 1.10 allows remote attackers to obtain sensitive...CVE-2002-17096.4 MediumDecember 31, 2002
basilix webmailCross-site scripting vulnerability (XSS) in BasiliX Webmail 1.10 allows remote attackers to...CVE-2002-1708Public exploit6.8 MediumDecember 31, 2002
phpbb group phpbbinstall.php in phpBB 2.0 through 2.0.1, when "allow_url_fopen" and "register_globals" variables...CVE-2002-17075.0 MediumDecember 31, 2002
cisco iosCisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal...CVE-2002-17067.5 HighDecember 31, 2002
microsoft internet explorerMicrosoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service ...CVE-2002-1705Public exploitEPSS 17.6%5.0 MediumDecember 31, 2002
zeroboardZeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows...CVE-2002-1704Public exploit5.0 MediumDecember 31, 2002
mewsoft netauctionCross-site scripting vulnerability (XSS) in auction.cgi for Mewsoft NetAuction 3.0 allows remote...CVE-2002-1703Public exploit6.8 MediumDecember 31, 2002
deltascripts php classifiedsCross-site scripting vulnerability (XSS) in DeltaScripts PHP Classifieds 6.0.5 allows remote...CVE-2002-1702Public exploit4.3 MediumDecember 31, 2002
macromedia coldfusion, microsoft internet information services, windows 2000 +2 moreCross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion...CVE-2002-1700Public exploitEPSS 24.3%4.3 MediumDecember 31, 2002
pascal michaud asp client checkSQL injection vulnerability in ASP Client Check (ASPCC) 1.3 and 1.5 allows remote attackers to...CVE-2002-169910.0 HighDecember 31, 2002
microsoft msn messengerBuffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to...CVE-2002-1698EPSS 15.5%5.0 MediumDecember 31, 2002
vtun project vtunElectronic Code Book (ECB) mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that...CVE-2002-1697Fix available7.5 HighDecember 31, 2002
pgp personal privacyMicrosoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a...CVE-2002-16965.5 MediumDecember 31, 2002
symantec norton internet security, microsoft internet information server, internet information services +2 moreNorton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE...CVE-2002-1695EPSS 13.6%5.0 MediumDecember 31, 2002
microsoft internet information server, internet information services +1 moreMicrosoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and...CVE-2002-1694EPSS 13.0%5.0 MediumDecember 31, 2002
microsoft windows 95Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary...CVE-2002-16923.6 LowDecember 31, 2002
alcatel-lucent omnipcxAlcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by...CVE-2002-169110.0 HighDecember 31, 2002
ibm aixUnknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka ...CVE-2002-169010.0 HighDecember 31, 2002
ibm aixUnknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify...CVE-2002-168910.0 HighDecember 31, 2002
microsoft internet explorerThe browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote...CVE-2002-1688Public exploitEPSS 17.5%5.0 MediumDecember 31, 2002
ibm aixBuffer overflow in the diagnostics library in AIX allows local users to "cause data and...CVE-2002-16872.1 LowDecember 31, 2002
ibm aixBuffer overflow in lscfg of unknown versions of AIX has unknown impact.CVE-2002-168610.0 HighDecember 31, 2002
working resources inc. badblueCross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7...CVE-2002-1685Public exploit4.3 MediumDecember 31, 2002
deerfield d2gfx, working resources inc. badblue +1 moreDirectory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition...CVE-2002-16845.0 MediumDecember 31, 2002
working resources inc. badblueCross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote...CVE-2002-1683Public exploit4.3 MediumDecember 31, 2002
daansystems newsreactorNewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the...CVE-2002-16825.5 MediumDecember 31, 2002
open source development network slashcodeCross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002...CVE-2002-16816.8 MediumDecember 31, 2002
cows cgi online worldweb shoppingCross-site scripting (XSS) vulnerability in CGI Online Worldweb Shopping 1.1 (a.k.a. COWS) allows...CVE-2002-16804.3 MediumDecember 31, 2002
jelsoft vbulletinCross-site scripting (XSS) vulnerability in Jelsoft vBulletin 2.2.0 allows remote attackers to...CVE-2002-16794.3 MediumDecember 31, 2002
jelsoft vbulletinCross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through...CVE-2002-16784.3 MediumDecember 31, 2002
mrtg mrtgconfig14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web...CVE-2002-16775.0 MediumDecember 31, 2002
bindview netinventory, netrc +1 moreBindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive...CVE-2002-16762.1 LowDecember 31, 2002
unreal unrealircdFormat string vulnerability in the Cio_PrintF function of cio_main.c in Unreal IRCd 3.1.1 allows...CVE-2002-16756.4 MediumDecember 31, 2002
freebsdprocfs on FreeBSD before 4.5 allows local users to cause a denial of service (kernel panic) by...CVE-2002-16741.2 LowDecember 31, 2002
webminThe web interface for Webmin 0.92 does not properly quote or filter script code in files that are...CVE-2002-1673Public exploit3.6 LowDecember 31, 2002
webminWebmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world...CVE-2002-16722.1 LowDecember 31, 2002
microsoft internet explorerMicrosoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of...CVE-2002-1671EPSS 12.1%5.0 MediumDecember 31, 2002
microsoft internet explorer, windows xp +1 moreMicrosoft Windows XP Professional upgrade edition overwrites previously installed patches for...CVE-2002-16704.6 MediumDecember 31, 2002
freebsdpkg_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable...CVE-2002-16692.1 LowDecember 31, 2002
hp hp-ux, hp-ux series 700, hp-ux series 800 +2 moreHP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to...CVE-2002-16682.1 LowDecember 31, 2002
freebsdThe virtual memory management system in FreeBSD 4.5-RELEASE and earlier does not properly check...CVE-2002-16672.1 LowDecember 31, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open