Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

software602 602pro lan suiteThe Telnet proxy of 602Pro LAN SUITE 2002 does not restrict the number of outstanding connections...CVE-2002-2174Public exploit5.0 MediumDecember 31, 2002
cerulean studios trillianBuffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute...CVE-2002-21737.5 HighDecember 31, 2002
shana informed designer, informed filler +1 moreInformed (1) Designer and (2) Filler 3.05 does not zero out newly allocated disk blocks as an...CVE-2002-21722.1 LowDecember 31, 2002
andrey cherezov acwebCross-site scripting (XSS) vulnerability in acWEB 1.8 and 1.14 allows remote attackers to insert...CVE-2002-2171Public exploit4.3 MediumDecember 31, 2002
working resources inc. badblueWorking Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict...CVE-2002-2170Public exploit7.5 HighDecember 31, 2002
aol instant messengerCross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows...CVE-2002-2169Public exploit5.0 MediumDecember 31, 2002
thorsten korner 123tkshopSQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to...CVE-2002-21687.5 HighDecember 31, 2002
thorsten korner 123tkshopDirectory traversal vulnerability in function_foot_1.inc.php for Thorsten Korner 123tkShop before...CVE-2002-21675.0 MediumDecember 31, 2002
e-zone media inc. fusetalkCross-site scripting (XSS) vulnerability in FuseTalk 2.0 and 3.0 allows remote attackers to...CVE-2002-21664.3 MediumDecember 31, 2002
imho webmailThe IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's...CVE-2002-2165Public exploit2.1 LowDecember 31, 2002
microsoft outlook expressBuffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a...CVE-2002-2164Public exploitEPSS 21.9%5.0 MediumDecember 31, 2002
killervault kvpollKvPoll 1.1 allows remote authenticated users to vote more than once by setting the "already_voted...CVE-2002-21634.0 MediumDecember 31, 2002
cerulean studios trillianCerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords...CVE-2002-2162Public exploit4.6 MediumDecember 31, 2002
kerio personal firewallKerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to cause a denial of...CVE-2002-21615.0 MediumDecember 31, 2002
linksys befsr11, befsr41, befsru31 +2 moreLinksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade...CVE-2002-215910.0 HighDecember 31, 2002
zendocs zentrackzenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an...CVE-2002-21585.0 MediumDecember 31, 2002
cerulean studios trillianBuffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long...CVE-2002-21567.5 HighDecember 31, 2002
cerulean studios trillianFormat string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and...CVE-2002-21557.5 HighDecember 31, 2002
monkey-project monkeyDirectory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read...CVE-2002-2154Public exploit5.0 MediumDecember 31, 2002
oracle application serverFormat string vulnerability in the administrative pages of the PL/SQL module for Oracle...CVE-2002-21537.5 HighDecember 31, 2002
software602 602pro lan suiteThe Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to...CVE-2002-215210.0 HighDecember 31, 2002
juniper netscreen screenosFirewalls from multiple vendors empty state tables more slowly than they are filled, which allows...CVE-2002-21505.0 MediumDecember 31, 2002
lucent access point service router 1500, access point service router 300, access point service router 600 +2 moreBuffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers...CVE-2002-2149Public exploit5.0 MediumDecember 31, 2002
lucent ascend max router, ascend pipeline router, dslterminator +2 moreLucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and...CVE-2002-21485.0 MediumDecember 31, 2002
savant webservercgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of...CVE-2002-21467.5 HighDecember 31, 2002
savant webserverSavant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password...CVE-2002-2145Public exploit7.5 HighDecember 31, 2002
free peers bearshareDirectory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read...CVE-2002-21445.0 MediumDecember 31, 2002
mysimplenewsThe admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which...CVE-2002-2143Public exploit7.5 HighDecember 31, 2002
bea weblogic server, weblogic integration +1 moreAn undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when...CVE-2002-21427.5 HighDecember 31, 2002
bea weblogic serverBEA WebLogic Server and Express 7.0 and 7.0.0.1, when running Servlets and Enterprise JavaBeans ...CVE-2002-21417.5 HighDecember 31, 2002
cisco pix firewall softwareBuffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x...CVE-2002-21405.0 MediumDecember 31, 2002
cisco pix firewall softwareCisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs...CVE-2002-21396.4 MediumDecember 31, 2002
hp hp-ux, advanced server 9000 +1 moreRFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11...CVE-2002-21385.0 MediumDecember 31, 2002
alloy gl-2422ap-s, linksys wap11, wisecom gl2422ap-0t +2 more +4 moreGlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as ...CVE-2002-21375.0 MediumDecember 31, 2002
peelhaut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the...CVE-2002-2134Public exploit5.0 MediumDecember 31, 2002
telindus 1120 adsl routerTelindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic,...CVE-2002-213310.0 HighDecember 31, 2002
microsoft windows 2000, windows xp +1 moreWindows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT...CVE-2002-21322.1 LowDecember 31, 2002
perl-httpdDirectory traversal vulnerability in Perl-HTTPd before 1.0.2 allows remote attackers to view...CVE-2002-21315.0 MediumDecember 31, 2002
gallery project gallerypublish_xp_docs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by...CVE-2002-21307.5 HighDecember 31, 2002
w-agoraCross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote...CVE-2002-2129Public exploit4.3 MediumDecember 31, 2002
w-agoraeditform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot)...CVE-2002-21284.6 MediumDecember 31, 2002
pedestal software integrity protection driverIntegrity Protection Driver (IPD) 1.2 and earlier blocks access to \Device\PhysicalMemory by its...CVE-2002-21272.1 LowDecember 31, 2002
pedestal software integrity protection driverrestrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20...CVE-2002-21262.1 LowDecember 31, 2002
microsoft internet explorer, ie +1 moreInternet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate...CVE-2002-21256.4 MediumDecember 31, 2002
nylonThe recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0,...CVE-2002-21245.0 MediumDecember 31, 2002
gallery project galleryPHP remote file inclusion vulnerability in publish_xp_docs.php for Gallery 1.3.2 allows remote...CVE-2002-21237.5 HighDecember 31, 2002
pointsec mobile technologies pointsecPointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a...CVE-2002-21222.1 LowDecember 31, 2002
surfcontrol superscout email filterSurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of...CVE-2002-21215.0 MediumDecember 31, 2002
qnx rtosMultiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long...CVE-2002-21204.6 MediumDecember 31, 2002
novell edirectoryNovell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote...CVE-2002-21199.8 CriticalDecember 31, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open