Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft data access componentsBuffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows...CVE-2002-1918EPSS 16.4%10.0 HighDecember 31, 2002
geeklogCRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3...CVE-2002-19175.0 MediumDecember 31, 2002
pirch irc, ruspirch +1 morePirch and RusPirch, when auto-log is enabled, allows remote attackers to cause a denial of...CVE-2002-19165.0 MediumDecember 31, 2002
freebsd, netbsd, openbsd +2 moretip on multiple BSD-based operating systems allows local users to cause a denial of service ...CVE-2002-19155.5 MediumDecember 31, 2002
dump project dumpdump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention)...CVE-2002-1914Fix available5.5 MediumDecember 31, 2002
myphpnukephptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full...CVE-2002-19135.0 MediumDecember 31, 2002
skystream emr5000SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when...CVE-2002-19127.5 HighDecember 31, 2002
zonelabs zonealarmZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause...CVE-2002-1911Public exploit5.0 MediumDecember 31, 2002
click-2 ingenium learning management systemClick2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords ...CVE-2002-1910Public exploit7.5 HighDecember 31, 2002
click2learn ingenium learning management systemClick2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative...CVE-2002-19095.0 MediumDecember 31, 2002
microsoft internet information servicesMicrosoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption)...CVE-2002-1908EPSS 13.7%5.0 MediumDecember 31, 2002
telcondex simplewebserverTelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash)...CVE-2002-1907Public exploit5.0 MediumDecember 31, 2002
polycom viavideoThe web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of...CVE-2002-1906Public exploit5.0 MediumDecember 31, 2002
polycom viavideoBuffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to...CVE-2002-1905Public exploit5.0 MediumDecember 31, 2002
gaztek ghttpdBuffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote...CVE-2002-1904Public exploit7.5 HighDecember 31, 2002
university of washington pinePine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which...CVE-2002-19035.0 MediumDecember 31, 2002
markus triska cgiforumCGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite...CVE-2002-19025.0 MediumDecember 31, 2002
bodo bauer bbgalleryCross-site scripting (XSS) vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to...CVE-2002-19014.3 MediumDecember 31, 2002
pinboardCross-site scripting (XSS) vulnerability in Pinboard 1.0 allows remote attackers to inject...CVE-2002-19004.3 MediumDecember 31, 2002
icewarp web mailCross-site scripting (XSS) vulnerability in IceWarp Web Mail 3.3.3 and 3.4.5 allows remote...CVE-2002-18994.3 MediumDecember 31, 2002
apple terminalTerminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via...CVE-2002-1898Public exploit7.2 HighDecember 31, 2002
mywebserverMyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service (crash)...CVE-2002-1897Public exploit5.0 MediumDecember 31, 2002
alsaplayerBuffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute...CVE-2002-1896Public exploitFix available7.2 HighDecember 31, 2002
apache tomcatThe servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3...CVE-2002-18955.0 MediumDecember 31, 2002
phpbb group phpbbCross-site scripting (XSS) vulnerability in viewtopic.php in phpBB 2.0.3 allows remote attackers...CVE-2002-18944.3 MediumDecember 31, 2002
argosoft mail serverCross-site scripting (XSS) vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote...CVE-2002-18934.3 MediumDecember 31, 2002
netgear fvs318NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a...CVE-2002-18922.1 LowDecember 31, 2002
ayman akt ircitBuffer overflow in IRCIT 0.3.1 IRC client allows remote attackers to execute arbitrary code via a...CVE-2002-1891Public exploit7.5 HighDecember 31, 2002
redhat rhmaskrhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink...CVE-2002-18902.1 LowDecember 31, 2002
logsurferOff-by-one buffer overflow in the context_action function in context.c of Logsurfer 1.41 through...CVE-2002-18895.0 MediumDecember 31, 2002
commonname toolbarCommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization...CVE-2002-18882.1 LowDecember 31, 2002
gregory kokanosky phpmynewsletterPHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote...CVE-2002-1887Public exploit7.5 HighDecember 31, 2002
tightauctionTightAuction 3.0 stores config.inc under the web document root with insufficient access control,...CVE-2002-1886Public exploit5.0 MediumDecember 31, 2002
powerphloggerPHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9...CVE-2002-1885Public exploit7.5 HighDecember 31, 2002
py-membresindex.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the...CVE-2002-1884Public exploit7.5 HighDecember 31, 2002
trolltech qt assistantTrolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the Designer, opens port 7358...CVE-2002-18836.4 MediumDecember 31, 2002
oracle e-business suiteUnknown vulnerability in AolSecurityPrivate.class in Oracle E-Business Suite 11i 11.1 through 11...CVE-2002-18827.5 HighDecember 31, 2002
macromedia flash playerMacromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of...CVE-2002-18815.0 MediumDecember 31, 2002
lokwa lokwabbLokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter...CVE-2002-18805.0 MediumDecember 31, 2002
lokwa lokwabbSQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL...CVE-2002-18797.5 HighDecember 31, 2002
w-agoraPHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute...CVE-2002-1878Public exploit5.0 MediumDecember 31, 2002
netgear fm114pNETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that...CVE-2002-18777.5 HighDecember 31, 2002
microsoft exchange serverMicrosoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a...CVE-2002-18762.1 LowDecember 31, 2002
mcafee entercept agentEntercept Agent 2.5 agent for Windows, released before May 21, 2002, allows local administrative...CVE-2002-18754.6 MediumDecember 31, 2002
astrocamastrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary...CVE-2002-187410.0 HighDecember 31, 2002
microsoft exchange serverMicrosoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote...CVE-2002-1873EPSS 13.6%5.0 MediumDecember 31, 2002
microsoft sql serverMicrosoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password...CVE-2002-18727.5 HighDecember 31, 2002
sun solaris, sunos +1 morepkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file...CVE-2002-18717.2 HighDecember 31, 2002
sws simple web serverSimple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle when the recv function call...CVE-2002-18707.5 HighDecember 31, 2002
heysoft eventsave, eventsave\+ +1 moreHeysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log...CVE-2002-18693.3 LowDecember 31, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open