CVEs published in December 2002
874 vulnerabilities, 73 critical, 0 exploited.
- com21 doxport 1100Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions...2.1 Low
- mark hanson xirconBuffer overflow in XiRCON 1.0 Beta 4 allows remote attackers to cause a denial of service ...5.0 Medium
- my postcards platinumDirectory traversal vulnerability in magiccard.cgi in My Postcards Platinum 5.0 and 6.0 allows...5.0 Medium
- imatix xitamiCross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows...4.3 Medium
- wesmo phpeventcalendarUnknown vulnerability in WesMo phpEventCalendar 1.1 allows remote attackers to execute arbitrary...7.5 High
- linux kernelLinux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows...2.1 Low
- finjan software surfingateFinjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access...7.5 High
- finjan software surfingateFinjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access...7.5 High
- cybozu share360Cross-site scripting (XSS) vulnerability in Cybozu Share360 1.1 allows remote attackers to inject...4.3 Medium
- nagiosNagios 1.0b1 through 1.0b3 allows remote attackers to execute arbitrary commands via shell...10.0 High
- kmmailCross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to...4.3 Medium
- penBuffer overflow in the netlog function in pen.c for Pen 0.9.1 and 0.9.2 allows remote attackers...7.5 High
- rox filerROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to...2.1 Low
- iomega nasIomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows...5.0 Medium
- phpCross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote...4.3 Medium
- aol instant messengerHeap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8...5.0 Medium
- phprankphpRank 1.8 does not properly check the return codes for MySQL operations when authenticating...7.5 High
- goahead software webserverBuffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a...7.5 High
- phprankCross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject...4.3 Medium
- iomega nas a300u firmwareThe Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits...7.5 High
- gringottsMultiple buffer overflows in Gringotts 0.5.9 allows local users to execute arbitrary commands via...7.2 High
- webminWebmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote...6.4 Medium
- tata integrated dialerVidesh Sanchar Nigam Limited (VSNL) Integrated Dialer Software 1.2.000, when the "Save Password"...5.5 Medium
- virtualzone smartmail serverBuffer overflow in SmartMail Server 1.0 Beta 10 allows remote attackers to cause a denial of...5.0 Medium
- motorola surfboardMotorola Surfboard 4200 cable modem allows remote attackers to cause a denial of service (crash)...5.0 Medium
- safetp serverSafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address...5.0 Medium
- imatix xitamiImatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been...5.0 Medium
- radiobird software web server 4 everyoneBuffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote attackers to cause a denial...5.0 Medium
- jacob navia lcc-win32LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used...5.0 Medium
- flashfxpFlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which...2.1 Low
- virgil cgi scannerVirgil CGI Scanner 0.9 allows remote attackers to execute arbitrary commands via the (1) tar ...7.5 High
- symantec firewall vpn appliance 100, firewall vpn appliance 200, firewall vpn appliance 200r +2 moreSymantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside...5.0 Medium
- utstarcom bas 1000UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which...7.5 High
- pingtel xpressaPingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and ...5.0 Medium
- pingtel xpressaPingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information...5.0 Medium
- microsoft windows 2000 terminal servicesThe terminal services screensaver for Microsoft Windows 2000 does not automatically lock the...7.2 High
- microsoft windows 2000, windows xp +1 moreMicrosoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do...7.5 High
- php arena pafiledbCross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote...4.3 Medium
- an an-httpdBuffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code...7.5 High
- php arena pafiledbCross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0...4.3 Medium
- software602 602pro lan suite602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request...5.0 Medium
- aquonics scripting file managerAquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing...2.1 Low
- aquonics scripting file managerDirectory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote...5.0 Medium
- tiny software personal firewallTiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service ...5.0 Medium
- apc powerchutePowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world...5.0 Medium
- oracle mysqlThe default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not...7.5 High
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8...4.3 Medium
- oracle mysqlThe default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the...7.5 High
- datawizard ftpxqBuffer overflow in FtpXQ 2.5 allows remote attackers to cause a denial of service (crash) via a...5.0 Medium
- virtual programming vp-aspSQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows remote attackers to execute...7.5 High
- Show moreLoading…