Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

ez systems httpbenchezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full...CVE-2002-1818Public exploit5.0 MediumDecember 31, 2002
symantec veritas cluster serverUnknown vulnerability in Veritas Cluster Server (VCS) 1.2 for WindowsNT, Cluster Server 1.3.0 for...CVE-2002-18177.5 HighDecember 31, 2002
redshift atphttpdOff-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier...CVE-2002-1816Public exploit9.8 CriticalDecember 31, 2002
aquonics scripting file managerDirectory traversal vulnerability in source.php and source.cgi in Aquonics File Manager 1.5...CVE-2002-18155.0 MediumDecember 31, 2002
gnome bonobo, mandrakesoft mandrake linux, redhat linux +2 moreBuffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute...CVE-2002-1814Public exploit4.6 MediumDecember 31, 2002
aol instant messengerDirectory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers...CVE-2002-1813Public exploit2.6 LowDecember 31, 2002
gdamBuffer overflow in gdam123 0.933 and 0.942 allows local users to execute arbitrary code via a...CVE-2002-1812Public exploit7.2 HighDecember 31, 2002
belkin f5d6130 wnapBelkin F5D6130 Wireless Network Access Point running firmware AP14G8 allows remote attackers to...CVE-2002-1811Public exploit5.0 MediumDecember 31, 2002
dlink dwl-900ap\+ firmwareD-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server...CVE-2002-18107.5 HighDecember 31, 2002
oracle mysqlThe default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a...CVE-2002-1809Public exploitEPSS 16.1%7.5 HighDecember 31, 2002
zack coburn meunity community systemCross-site scripting (XSS) vulnerability in Meunity Community System 1.1 allows remote attackers...CVE-2002-18084.3 MediumDecember 31, 2002
phpwebsiteCross-site scripting (XSS) vulnerability in phpWebSite 0.8.3 allows remote attackers to inject...CVE-2002-18074.3 MediumDecember 31, 2002
drupalCross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject...CVE-2002-1806Public exploit4.3 MediumDecember 31, 2002
dacodeCross-site scripting (XSS) vulnerability in DaCode 1.2.0 allows remote attackers to inject...CVE-2002-1805Public exploit4.3 MediumDecember 31, 2002
npdsCross-site scripting (XSS) vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary...CVE-2002-1804Public exploit4.3 MediumDecember 31, 2002
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in PHP-Nuke 6.0 allows remote attackers to inject...CVE-2002-1803Public exploit4.3 MediumDecember 31, 2002
xoopsCross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows remote attackers to inject...CVE-2002-1802Public exploit4.3 MediumDecember 31, 2002
bizdesign imagefolioImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via a...CVE-2002-18015.0 MediumDecember 31, 2002
phprankphpRank 1.8 stores the administrative password in plaintext on the server and in the "ap" cookie,...CVE-2002-18007.5 HighDecember 31, 2002
phprankCross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject...CVE-2002-1799Public exploit4.3 MediumDecember 31, 2002
midicart php, php maxi, php plus +2 moreMidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files...CVE-2002-1798Public exploit9.1 CriticalDecember 31, 2002
hp chaivmChaiVM for HP color LaserJet 4500 and 4550 or HP LaserJet 4100 and 8150 does not properly enforce...CVE-2002-17974.6 MediumDecember 31, 2002
hp chaivm ezloaderChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not...CVE-2002-17967.8 HighDecember 31, 2002
microsoft tsac activex controlCross-site scripting (XSS) vulnerability in connect.asp in Microsoft Terminal Services Advanced...CVE-2002-1795EPSS 16.8%4.3 MediumDecember 31, 2002
hp hp-ux, ldap-ux integration +1 moreUnknown vulnerability in pam_authz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11...CVE-2002-179410.0 HighDecember 31, 2002
hp virtualvault, vvos +1 moreHTTP Server mod_ssl module running on HP-UX 11.04 with Virtualvault OS (VVOS) 4.5 through 4.6...CVE-2002-17935.0 MediumDecember 31, 2002
fake identd identdBuffer overflow in Fake Identd 0.9 through 1.4 allows remote attackers to execute arbitrary code...CVE-2002-1792Public exploit10.0 HighDecember 31, 2002
sgi irixSGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions,...CVE-2002-17912.1 LowDecember 31, 2002
microsoft internet information services, exchange server, internet information server +2 moreThe SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote...CVE-2002-1790Public exploitEPSS 34.0%5.0 MediumDecember 31, 2002
newsxFormat string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute...CVE-2002-17897.2 HighDecember 31, 2002
kim storm nnFormat string vulnerability in the nn_exitmsg function in nn 6.6.0 through 6.6.3 allows remote...CVE-2002-1788Fix available7.5 HighDecember 31, 2002
sgi irixBuffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users...CVE-2002-17874.6 MediumDecember 31, 2002
sgi irixSGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users...CVE-2002-17862.1 LowDecember 31, 2002
zeus technologies web serverCross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0...CVE-2002-1785Public exploit1.9 LowDecember 31, 2002
hp tru64Unknown vulnerability in inetd in HP Tru64 Unix 4.0f through 5.1a allows remote attackers to...CVE-2002-17845.0 MediumDecember 31, 2002
phpCRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows...CVE-2002-1783EPSS 16.7%5.0 MediumDecember 31, 2002
university of washington uw-imapThe default configuration of University of Washington IMAP daemon (wu-imapd), when running on a...CVE-2002-1782Fix available2.1 LowDecember 31, 2002
delegateMultiple buffer overflows in DeleGate 7.7.0 through 7.8.1 allow remote attackers to execute...CVE-2002-17817.5 HighDecember 31, 2002
alcatech gmbh bpm studio proBPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a...CVE-2002-17805.0 MediumDecember 31, 2002
symantec norton personal firewallThe "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 (NPW) does not...CVE-2002-17797.5 HighDecember 31, 2002
symantec norton personal firewallSymantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection...CVE-2002-17787.5 HighDecember 31, 2002
symantec norton antivirus** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV)...CVE-2002-1777Disputed7.5 HighDecember 31, 2002
symantec norton antivirus** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002...CVE-2002-1776Disputed7.5 HighDecember 31, 2002
symantec norton antivirus** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV)...CVE-2002-1775Disputed7.5 HighDecember 31, 2002
symantec norton antivirus** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002...CVE-2002-1774Disputed7.5 HighDecember 31, 2002
mirabilis icq for macos xBuffer overflow in ICQ 2.6x for MacOS X 10.0 through 10.1.2 allows remote attackers to cause a...CVE-2002-1773Public exploit7.5 HighDecember 31, 2002
novell netwareNovell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging...CVE-2002-17724.6 MediumDecember 31, 2002
matt wright formmailMatt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by...CVE-2002-17715.0 MediumDecember 31, 2002
qualcomm eudoraQualcomm Eudora 5.1 allows remote attackers to execute arbitrary code via an HTML e-mail message...CVE-2002-17705.0 MediumDecember 31, 2002
microsoft site server, site server commerce +1 moreMicrosoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default...CVE-2002-1769EPSS 11.7%7.5 HighDecember 31, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open