Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

blue world communications lasso web data engineBuffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a...CVE-2002-21185.0 MediumDecember 31, 2002
microsoft windows xpMicrosoft Windows XP allows remote attackers to cause a denial of service (CPU consumption) by...CVE-2002-2117EPSS 11.8%5.0 MediumDecember 31, 2002
netgear rm356, rt338 +1 moreNetgear RM-356 and RT-338 series SOHO routers allow remote attackers to cause a denial of service...CVE-2002-21165.0 MediumDecember 31, 2002
hns, hns hns-lite +1 moreCross-site scripting (XSS) vulnerability in Hyper NIKKI System (HNS) Lite before 0.9 and HNS...CVE-2002-21154.3 MediumDecember 31, 2002
netjukeArtekopia Netjuke before 1.0 b7 allows remote attackers to execute arbitrary code on the web...CVE-2002-21147.5 HighDecember 31, 2002
agh htmlsearchsearch.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell...CVE-2002-2113Public exploit7.5 HighDecember 31, 2002
rca digital cable modemRCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over...CVE-2002-21125.0 MediumDecember 31, 2002
gianni tedesco fwmonFwmon before 1.0.10 allows remote attackers to cause a denial of service (crash) by causing the...CVE-2002-21115.0 MediumDecember 31, 2002
rca digital cable modemThe RCA Digital Cable Modems DCM225 and DCM225E allow remote attackers to cause a denial of...CVE-2002-21105.0 MediumDecember 31, 2002
matt wright formmailMatt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and...CVE-2002-21097.5 HighDecember 31, 2002
sony vaio manual cybersupportUnknown vulnerability in the "VAIO Manual" software in certain Sony VAIO personal computers sold...CVE-2002-21085.0 MediumDecember 31, 2002
veridis openkeyserverCross-site scripting (XSS) vulnerability in the lookup script in Veridis OpenKeyServer (OKS) 1.2...CVE-2002-21074.3 MediumDecember 31, 2002
wikkitikkitaviPHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to...CVE-2002-2106Public exploit7.5 HighDecember 31, 2002
microsoft windows xpMicrosoft Windows XP allows local users to prevent the system from booting via a corrupt explorer...CVE-2002-2105Public exploit2.1 LowDecember 31, 2002
ganglia php rrd web clientgraph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary...CVE-2002-21047.5 HighDecember 31, 2002
apache http serverApache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse...CVE-2002-21035.0 MediumDecember 31, 2002
jcraft jzlibInfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service ...CVE-2002-2102Fix available5.0 MediumDecember 31, 2002
microsoft outlookMicrosoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when...CVE-2002-2101EPSS 11.1%7.5 HighDecember 31, 2002
microsoft outlookMicrosoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for...CVE-2002-2100EPSS 11.4%5.0 MediumDecember 31, 2002
gnu data display debuggerBuffer overflow in the GNU DataDisplay Debugger (DDD) 3.3.1 allows local users to execute...CVE-2002-20997.2 HighDecember 31, 2002
axspawnBuffer overflow in axspawn.c in Axspawn-pam before 0.2.1a allows remote attackers to execute...CVE-2002-20987.5 HighDecember 31, 2002
maradnsThe compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of...CVE-2002-2097Fix available5.0 MediumDecember 31, 2002
novell netwareBuffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows...CVE-2002-20967.5 HighDecember 31, 2002
joe testa hellbentJoe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent...CVE-2002-20955.0 MediumDecember 31, 2002
joetesta hellbentJoe Testa hellbent 01 allows remote attackers to determine the full path of the web root...CVE-2002-20945.0 MediumDecember 31, 2002
sgi irixThe Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video",...CVE-2002-20932.1 LowDecember 31, 2002
freebsd, netbsd, openbsd +2 moreRace condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and...CVE-2002-20923.7 LowDecember 31, 2002
decfingerdFormat string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote...CVE-2002-20917.5 HighDecember 31, 2002
caucho technology resinCaucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root...CVE-2002-20905.0 MediumDecember 31, 2002
sun solarisBuffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long...CVE-2002-20894.6 MediumDecember 31, 2002
mosix project clump osThe MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows...CVE-2002-208810.0 HighDecember 31, 2002
borland software interbaseBuffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long...CVE-2002-2087Public exploit4.6 MediumDecember 31, 2002
squirrelmailMultiple cross-site scripting (XSS) vulnerabilities in magicHTML of SquirrelMail before 1.2.6...CVE-2002-20864.3 MediumDecember 31, 2002
wwwebbb forumDirectory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows...CVE-2002-20855.0 MediumDecember 31, 2002
portix-phpDirectory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read...CVE-2002-2084Public exploit5.0 MediumDecember 31, 2002
novell netwareThe Novell Netware client running on Windows 95 allows local users to bypass the login and open...CVE-2002-20832.1 LowDecember 31, 2002
floosietek ftgateoffice, ftgatepro +1 moreFTGate and FTGate Pro 1.05 lock user mailboxes before authentication succeeds, which allows...CVE-2002-20827.5 HighDecember 31, 2002
microsoft site server, site server commerce +1 morecphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service ...CVE-2002-2081EPSS 15.4%5.0 MediumDecember 31, 2002
floosietek ftgateproFloositek FTGate PRO 1.05 allows remote attackers to cause a denial of service (memory and CPU...CVE-2002-20805.0 MediumDecember 31, 2002
mosix project mosix, openmosix project openmosix +1 moremosix-protocol-stack in Multicomputer Operating System for UnIX (MOSIX) 1.5.7 allows remote...CVE-2002-20795.0 MediumDecember 31, 2002
floosietek ftgateoffice, ftgatepro +1 moreHeap-based buffer overflow in Floositek (1) FTGate Pro 1.05 and (2) FTGate Office 1.05 allows...CVE-2002-20787.5 HighDecember 31, 2002
microsoft windows 2000The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an ...CVE-2002-2077EPSS 15.9%5.0 MediumDecember 31, 2002
summit computer networks lil httpDirectory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers to read...CVE-2002-20765.0 MediumDecember 31, 2002
mirabilis icqICQ 2001a and 2002b allows remote attackers to cause a denial of service (memory consumption and...CVE-2002-20755.0 MediumDecember 31, 2002
erwin lansing mailidxSQL injection vulnerability in Mailidx before 20020105 allows remote attackers to execute...CVE-2002-20747.5 HighDecember 31, 2002
microsoft site server, windows nt, site server commerce +2 moreCross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on...CVE-2002-2073Public exploitEPSS 12.9%4.3 MediumDecember 31, 2002
sun jrejava.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows...CVE-2002-2072Public exploit5.0 MediumDecember 31, 2002
compaq tru64Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, ...CVE-2002-2071Public exploit5.0 MediumDecember 31, 2002
accessdata securecleanSecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files...CVE-2002-20707.5 HighDecember 31, 2002
pgp personal privacyPGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS...CVE-2002-20697.5 HighDecember 31, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open