Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

tolvanen eraserEraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file...CVE-2002-20687.5 HighDecember 31, 2002
east-tec eraserEast-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on...CVE-2002-20677.5 HighDecember 31, 2002
jetico bcwipeBestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that...CVE-2002-20667.5 HighDecember 31, 2002
webcalendarWebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote...CVE-2002-20655.0 MediumDecember 31, 2002
phpwebgalleryisadmin.php in PhpWebGallery 1.0 allows remote attackers to gain administrative access via by...CVE-2002-20647.5 HighDecember 31, 2002
atguard personal firewallAtGuard 3.2 allows remote attackers to bypass firwall filters and execute prohibited programs by...CVE-2002-20637.5 HighDecember 31, 2002
microsoft internet explorerCross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when...CVE-2002-2062Public exploitEPSS 13.3%4.3 MediumDecember 31, 2002
mozilla, netscape navigator +1 moreHeap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers...CVE-2002-20617.5 HighDecember 31, 2002
twibright labs linksBuffer overflow in Links 2.0 pre4 allows remote attackers to crash client browsers and possibly...CVE-2002-20607.5 HighDecember 31, 2002
intel d845bg motherboard, d845hv motherboard, d845pt motherboard +1 more +3 moreBIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to...CVE-2002-20594.6 MediumDecember 31, 2002
teekai tracking onlineTeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt,...CVE-2002-20587.5 HighDecember 31, 2002
teekai forumTeeKai Forum 1.2 uses weak encryption of web usage statistics in data/member_log.txt, which is...CVE-2002-20575.0 MediumDecember 31, 2002
teekai forumCross-site scripting (XSS) vulnerability in TeeKai Forum 1.2 allows remote attackers to inject...CVE-2002-20564.3 MediumDecember 31, 2002
teekai tracking onlineCross-site scripting (XSS) vulnerability in userlog.php in TeeKai Tracking Online 1.0 allows...CVE-2002-2055Public exploit4.3 MediumDecember 31, 2002
teekai forumTeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and gain...CVE-2002-20547.5 HighDecember 31, 2002
cisco iosThe design of the Hot Standby Routing Protocol (HSRP), as implemented on Cisco IOS 12.1, when...CVE-2002-20535.0 MediumDecember 31, 2002
cisco iosCisco 2611 router running IOS 12.1(6.5), possibly an interim release, allows remote attackers to...CVE-2002-20525.0 MediumDecember 31, 2002
modloganThe processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option,...CVE-2002-20512.1 LowDecember 31, 2002
modloganDirectory traversal vulnerability in processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when...CVE-2002-20502.1 LowDecember 31, 2002
dug song dsniff, fragroute, fragrouter +2 moreconfigure for Dsniff 2.3, fragroute 1.2, and fragrouter 1.6, when downloaded from monkey.org on...CVE-2002-20497.5 HighDecember 31, 2002
michael baumer pfingerBuffer overflow in PFinger 0.7.8 client allows remote attackers to execute arbitrary code via a...CVE-2002-20487.5 HighDecember 31, 2002
sketchThe file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute...CVE-2002-2047Fix available10.0 HighDecember 31, 2002
xqus x-newsx_news.php in X-News (x_news) 1.1 and earlier allows remote attackers to gain administrative...CVE-2002-20467.5 HighDecember 31, 2002
xqus x-statx_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands...CVE-2002-20456.4 MediumDecember 31, 2002
xqus x-statCross-site scripting (XSS) vulnerability in x_stat_admin.php in x-stat 2.3 and earlier allows...CVE-2002-20444.3 MediumDecember 31, 2002
cyrus saslSQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and...CVE-2002-20437.5 HighDecember 31, 2002
qnx rtosptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to...CVE-2002-2042Public exploit7.2 HighDecember 31, 2002
qnx rtosMultiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute...CVE-2002-2041Public exploit7.2 HighDecember 31, 2002
qnx rtosThe (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and...CVE-2002-2040Public exploit7.2 HighDecember 31, 2002
qnx rtos/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain...CVE-2002-2039Public exploit2.1 LowDecember 31, 2002
bill abt next generation posix threadingNext Generation POSIX Threading (NGPT) 1.9.0 uses a filesystem-based shared memory entry, which...CVE-2002-20383.6 LowDecember 31, 2002
cisco bams, pgw 2200, sc2200 +2 more +4 moreThe Cisco Media Gateway Controller (MGC) in (1) SC2200 7.4 and earlier, (2) VSC3000 9.1 and...CVE-2002-20375.0 MediumDecember 31, 2002
sun ray server softwareSun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote...CVE-2002-20367.5 HighDecember 31, 2002
realityscape mylogin 2000SQL injection vulnerability in RealityScape MyLogin 2000 1.0.0 and earlier allows remote...CVE-2002-20357.5 HighDecember 31, 2002
john hardin procmail email sanitizerThe Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter...CVE-2002-20347.5 HighDecember 31, 2002
faqmanager faqmanager.cgifaqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by...CVE-2002-20335.0 MediumDecember 31, 2002
francisco burzi php-nukesql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which...CVE-2002-2032Public exploit5.0 MediumDecember 31, 2002
microsoft internet explorerInternet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to...CVE-2002-2031Public exploitEPSS 20.5%5.0 MediumDecember 31, 2002
sqldata enterprise serverStack-based buffer overflow in SQLData Enterprise Server 3.0 allows remote attacker to execute...CVE-2002-20307.5 HighDecember 31, 2002
apache http serverPHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows...CVE-2002-2029Public exploitEPSS 23.1%7.5 HighDecember 31, 2002
microsoft windows nt, windows 2000, windows xp +2 moreThe screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has...CVE-2002-20282.1 LowDecember 31, 2002
doowDatabase of Our Owlish Wisdom (DOOW) 0.1 through 0.2.1 does not properly verify user permissions,...CVE-2002-20277.5 HighDecember 31, 2002
browseftp clientBuffer overflow in BrowseFTP 1.62 client allows remote FTP servers to execute arbitrary code via...CVE-2002-2026Public exploit7.5 HighDecember 31, 2002
ibm lotus domino serverLotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by...CVE-2002-20255.0 MediumDecember 31, 2002
horde impHorde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request...CVE-2002-20245.0 MediumDecember 31, 2002
yamaguchi shingo beep2The get_parameter_from_freqency_source function in beep2 1.0, 1.1 and 1.2, when installed setuid...CVE-2002-20232.1 LowDecember 31, 2002
kaffe openvmFormat string vulnerability in Kaffe OpenVM 1.0.6 and earlier allows local users to execute...CVE-2002-20227.2 HighDecember 31, 2002
woltlab burning boardCross-site scripting (XSS) vulnerability in WoltLab Burning Board (wbboard) 1.1.1 allows remote...CVE-2002-2021Public exploit4.3 MediumDecember 31, 2002
netgear rp114Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26 uses a default administrator password and...CVE-2002-20207.5 HighDecember 31, 2002
oscommercePHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a. Exchange...CVE-2002-2019Public exploit7.5 HighDecember 31, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open