Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

daniel stenberg dispairDispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form...CVE-2002-1868Public exploit10.0 HighDecember 31, 2002
bizdesign imagefolioThe default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control access to (1...CVE-2002-18677.5 HighDecember 31, 2002
sws simple web serverSimple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error...CVE-2002-18665.0 MediumDecember 31, 2002
d-link di-804, dl-704, linksys befw11s4 +1 more +3 moreBuffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6,...CVE-2002-1865Public exploit5.0 MediumDecember 31, 2002
sws simple web serverDirectory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote...CVE-2002-1864EPSS 17.8%5.0 MediumDecember 31, 2002
iomega network attached storageIomega Network Attached Storage (NAS) A300U, and possibly other models, does not allow the FTP...CVE-2002-18634.6 MediumDecember 31, 2002
virtualzone smartmail serverSmartMail Server 2.0 allows remote attackers to cause a denial of service (crash) by sending data...CVE-2002-1862Public exploit5.0 MediumDecember 31, 2002
sybase easerverSybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to...CVE-2002-18615.0 MediumDecember 31, 2002
pramati serverPramati Server 3.0, when running on Windows, allows remote attackers to retrieve files in the WEB...CVE-2002-18605.0 MediumDecember 31, 2002
orionserver orion application serverOrion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve...CVE-2002-18595.0 MediumDecember 31, 2002
oracle application serverOracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows,...CVE-2002-18585.0 MediumDecember 31, 2002
jo webserverjo! jo Webserver 1.0, when running on Windows, allows remote attackers to retrieve files in the...CVE-2002-18575.0 MediumDecember 31, 2002
hp application serverHP Application Server 8.0, when running on Windows, allows remote attackers to retrieve files in...CVE-2002-18565.0 MediumDecember 31, 2002
macromedia jrunMacromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve...CVE-2002-18555.0 MediumDecember 31, 2002
rlaj whoisRlaj whois CGI script (whois.cgi) 1.0 allows remote attackers to execute arbitrary commands via...CVE-2002-185410.0 HighDecember 31, 2002
carlos sanchez valle mynewsgroupsCross-site scripting (XSS) vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to...CVE-2002-18534.3 MediumDecember 31, 2002
monkey-project monkeyCross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject...CVE-2002-1852Public exploit4.3 MediumDecember 31, 2002
ipswitch ws ftp proBuffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via...CVE-2002-18517.5 HighDecember 31, 2002
apache http servermod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a...CVE-2002-1850Public exploitFix availableEPSS 17.4%7.5 HighDecember 31, 2002
parachat serverParaChat Server 4.0 does not log users off if the browser's back button is used, which allows...CVE-2002-18495.0 MediumDecember 31, 2002
tightvncTightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text...CVE-2002-18482.1 LowDecember 31, 2002
microsoft windows media playerBuffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows...CVE-2002-1847Public exploitEPSS 33.6%7.5 HighDecember 31, 2002
yabbYet Another Bulletin Board (YaBB) 1.40 and 1.41 does not require a user to submit the correct...CVE-2002-18465.0 MediumDecember 31, 2002
yabbCross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40...CVE-2002-1845Public exploit4.3 MediumDecember 31, 2002
microsoft windows media playerMicrosoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with...CVE-2002-18447.8 HighDecember 31, 2002
perlbotPerlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in ...CVE-2002-18437.5 HighDecember 31, 2002
perlbotPerlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters...CVE-2002-18427.5 HighDecember 31, 2002
noguska nolaThe document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that...CVE-2002-18415.0 MediumDecember 31, 2002
irssiirssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the...CVE-2002-184010.0 HighDecember 31, 2002
trend micro interscan viruswall for windows ntTrend Micro InterScan VirusWall for Windows NT 3.52 does not record the sender's IP address in...CVE-2002-18395.0 MediumDecember 31, 2002
steve sachs charities.cronCharities.cron 1.0.2 through 1.6.0 allows local users to write to arbitrary files via a symlink...CVE-2002-18385.0 MediumDecember 31, 2002
idsThe getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote...CVE-2002-1837Public exploit5.0 MediumDecember 31, 2002
xerox docutech 6110, docutech 6115 +1 moreThe default configuration of Xerox DocuTech 6110 and DocuTech 6115 exports certain NFS shares to...CVE-2002-18365.0 MediumDecember 31, 2002
xerox docutech 6110, docutech 6115 +1 moreThe default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a...CVE-2002-18357.5 HighDecember 31, 2002
xerox docutech 6110, docutech 6115 +1 moreThe default configuration of Xerox DocuTech 6110 and DocuTech 6115 allows remote attackers to...CVE-2002-18346.4 MediumDecember 31, 2002
xerox docutech 6110, docutech 6115 +1 moreThe default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative...CVE-2002-18337.5 HighDecember 31, 2002
scaramanga firestorm idsUnknown vulnerability in the "ipopts decode" functionality in Firestorm IDS 0.4.0 through 0.4.2...CVE-2002-18325.0 MediumDecember 31, 2002
microsoft msn messengerMicrosoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of...CVE-2002-1831Public exploitEPSS 22.3%5.0 MediumDecember 31, 2002
openbbOpen Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and...CVE-2002-1830Public exploit5.0 MediumDecember 31, 2002
openbbCross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0...CVE-2002-1829Public exploit4.3 MediumDecember 31, 2002
savant webserverSavant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET...CVE-2002-1828Public exploit5.0 MediumDecember 31, 2002
sendmailSendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an...CVE-2002-1827Public exploitFix available2.1 LowDecember 31, 2002
grsecurity kernel patchgrsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by...CVE-2002-1826Public exploit4.6 MediumDecember 31, 2002
wasd http serverFormat string vulnerability in PerlRTE_example1.pl in WASD 7.1, 7.2.0 through 7.2.3, and 8.0.0...CVE-2002-18256.4 MediumDecember 31, 2002
microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 6.0, when handling an expired CA-CERT in a webserver's certificate...CVE-2002-18245.0 MediumDecember 31, 2002
lonerunner zeroo http serverBuffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers...CVE-2002-1823Public exploitEPSS 10.2%7.5 HighDecember 31, 2002
ibm http serverIBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root...CVE-2002-18225.0 MediumDecember 31, 2002
ultimate php board php boardUltimate PHP Board (UPB) 1.0 and 1.0b allows remote authenticated users to gain privileges and...CVE-2002-18214.6 MediumDecember 31, 2002
ultimate php board project php boardregister.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a...CVE-2002-18209.8 CriticalDecember 31, 2002
tinyhttpdDirectory traversal vulnerability in TinyHTTPD 0.1 .0 allows remote attackers to read or execute...CVE-2002-18196.4 MediumDecember 31, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open