Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

cisco iosCisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a...CVE-2002-17685.0 MediumDecember 31, 2002
oracle database serverBuffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to...CVE-2002-1767Public exploit7.2 HighDecember 31, 2002
netscape communicatorBuffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and...CVE-2002-1766Public exploit4.6 MediumDecember 31, 2002
ximian evolutionEvolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service (memory...CVE-2002-1765Fix available5.0 MediumDecember 31, 2002
adobe acrobat readeracroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files...CVE-2002-17642.1 LowDecember 31, 2002
sun sunosThe dtscreen Sun Solaris 8 CDE screensaver crashes when the "Shift" and "Return" keys are pressed...CVE-2002-17634.6 MediumDecember 31, 2002
microsoft baseline security analyzerMicrosoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:...CVE-2002-1762EPSS 15.9%5.0 MediumDecember 31, 2002
phprojektDirectory traversal vulnerability in PHProjekt 2.0 through 3.1 allows remote attackers to read...CVE-2002-17615.0 MediumDecember 31, 2002
phprojektMultiple SQL injection vulnerabilities in PHProjekt 2.0 through 3.1 allow remote attackers to...CVE-2002-17607.5 HighDecember 31, 2002
phprojektThe upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables...CVE-2002-17595.0 MediumDecember 31, 2002
phprojektPHProjekt 2.0 through 3.1 allows remote attackers to view or modify data via requests to certain...CVE-2002-17585.0 MediumDecember 31, 2002
phprojektPHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows...CVE-2002-1757Public exploit7.5 HighDecember 31, 2002
acd systems acdseeACDSee 4.0 allows remote attackers to cause a denial of service (crash) via an .ais file with a...CVE-2002-17565.0 MediumDecember 31, 2002
tinctinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote...CVE-2002-1755Fix available5.0 MediumDecember 31, 2002
novell netware clientBuffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial...CVE-2002-17542.1 LowDecember 31, 2002
cgiscript csnews professionalcsNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute...CVE-2002-1753EPSS 32.2%7.5 HighDecember 31, 2002
cgiscript cschat-r-boxcsChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl...CVE-2002-17527.5 HighDecember 31, 2002
cgiscript.net cslivesupportcsLiveSupport.cgi in CGIScript.net csLiveSupport allows remote attackers to execute arbitrary...CVE-2002-17515.0 MediumDecember 31, 2002
cgiscript csguestbookcsGuestbook.cgi in CGISCRIPT.NET csGuestbook 1.0 allows remote attackers to execute arbitrary...CVE-2002-17507.5 HighDecember 31, 2002
microsoft windows 2000Windows 2000 Terminal Services, when using the disconnect feature of the client, does not...CVE-2002-17497.2 HighDecember 31, 2002
open source development network slashcodeUnknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote...CVE-2002-17487.2 HighDecember 31, 2002
maxim krasnyansky vtunVtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data...CVE-2002-1747Fix available5.0 MediumDecember 31, 2002
maxim krasnyansky vtunVtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying...CVE-2002-1746Fix available5.0 MediumDecember 31, 2002
microsoft internet information servicesOff-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers...CVE-2002-1745EPSS 19.1%7.5 HighDecember 31, 2002
microsoft internet information servicesDirectory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to...CVE-2002-1744Public exploitEPSS 65.2%5.0 MediumDecember 31, 2002
mirabilis icqAOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a...CVE-2002-17435.0 MediumDecember 31, 2002
paul kulchenko soap liteSOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling...CVE-2002-17425.0 MediumDecember 31, 2002
alt-n worldclientDirectory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies...CVE-2002-1741Public exploit7.2 HighDecember 31, 2002
alt-n mdaemon, worldclient +1 moreBuffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and...CVE-2002-1740Public exploit2.1 LowDecember 31, 2002
mdaemonAlt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user...CVE-2002-17395.5 MediumDecember 31, 2002
alt-n mdaemonAlt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a...CVE-2002-17385.0 MediumDecember 31, 2002
astaro security linuxAstaro Security Linux 2.016 creates world-writable files and directories, which allows local...CVE-2002-17372.1 LowDecember 31, 2002
markus triska cginewsUnknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via ...CVE-2002-17365.0 MediumDecember 31, 2002
davin mccall dloginBuffer overflow in dlogin 1.0a could allow local users to gain privileges via unknown attack...CVE-2002-17357.2 HighDecember 31, 2002
aspbin newsproNewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their...CVE-2002-173410.0 HighDecember 31, 2002
prospero technologies message boardCross-site scripting (XSS) vulnerability in the web-based message board in Prospero Technologies...CVE-2002-17334.3 MediumDecember 31, 2002
actinic catalogMultiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote...CVE-2002-17324.3 MediumDecember 31, 2002
ibm os 400The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing...CVE-2002-1731Public exploit2.1 LowDecember 31, 2002
aspjar guestbookASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete...CVE-2002-17305.0 MediumDecember 31, 2002
aspjar guestbookCross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers to...CVE-2002-17296.8 MediumDecember 31, 2002
asksam systems web publisheraskSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web...CVE-2002-17285.0 MediumDecember 31, 2002
asksam systems web publisherCross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web...CVE-2002-1727Public exploit6.8 MediumDecember 31, 2002
brokenbytes photodbsecure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a...CVE-2002-17267.5 HighDecember 31, 2002
onlinetools.org phpimageviewphpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via...CVE-2002-17255.0 MediumDecember 31, 2002
onlinetools.org phpimageviewCross-site scripting vulnerability (XSS) in phpimageview.php for PHPImageView 1.0 allows remote...CVE-2002-17246.8 MediumDecember 31, 2002
powerboardsPowerboards 2.2b allows remote attackers to view the full path to the backend database by sending...CVE-2002-17235.0 MediumDecember 31, 2002
logitech itouch keyboard, cordless freedom itouch keyboard, cordless itouch keyboard +2 moreLogitech iTouch keyboards allows attackers with physical access to the system to bypass the...CVE-2002-17224.6 MediumDecember 31, 2002
pldaniels altermimeOff-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of...CVE-2002-17217.5 HighDecember 31, 2002
outfront spooky loginSQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass...CVE-2002-1720Public exploit7.5 HighDecember 31, 2002
bavoUnknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages.CVE-2002-17195.0 MediumDecember 31, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open