Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

apple mac os xThe default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5...CVE-2002-23265.0 MediumDecember 31, 2002
university of washington pineThe c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by...CVE-2002-2325Public exploit7.8 HighDecember 31, 2002
microsoft windows xpThe "System Restore" directory and subdirectories, and possibly other subdirectories in the ...CVE-2002-23247.2 HighDecember 31, 2002
sun solaris pc netlinkSun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and...CVE-2002-23237.5 HighDecember 31, 2002
ultimate php board php boardUltimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient...CVE-2002-23225.0 MediumDecember 31, 2002
phplinkatCross-site scripting (XSS) vulnerability in (1) showcat.php and (2) addyoursite.php in phpLinkat...CVE-2002-2321Public exploit4.3 MediumDecember 31, 2002
mysimplenewsMySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request...CVE-2002-23207.8 HighDecember 31, 2002
mysimplenewsStatic code injection vulnerability in users.php in MySimpleNews allows remote attackers to...CVE-2002-2319Public exploit7.5 HighDecember 31, 2002
blueface falcon web serverCross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021...CVE-2002-2318Public exploit4.3 MediumDecember 31, 2002
symantec velociraptorMemory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote...CVE-2002-23177.8 HighDecember 31, 2002
cisco catosCisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC...CVE-2002-23165.0 MediumDecember 31, 2002
cisco iosCisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote...CVE-2002-2315Public exploit7.8 HighDecember 31, 2002
mozillaMozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL...CVE-2002-2314Public exploit5.0 MediumDecember 31, 2002
qualcomm eudoraEudora email client 5.1.1, with "use Microsoft viewer" enabled, allows remote attackers to...CVE-2002-23138.8 HighDecember 31, 2002
opera software operaOpera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key...CVE-2002-2312Public exploit5.8 MediumDecember 31, 2002
microsoft internet explorer, opera software web browser +1 moreMicrosoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary...CVE-2002-23116.4 MediumDecember 31, 2002
kryptronic clickcartproClickCartPro 4.0 stores the admin_user.db data file under the web document root with insufficient...CVE-2002-23105.0 MediumDecember 31, 2002
phpphp.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which...CVE-2002-2309Public exploit7.8 HighDecember 31, 2002
netscape communicatorNetscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client...CVE-2002-23085.0 MediumDecember 31, 2002
pyramid benhur software updateThe default configuration of BenHur Firewall release 3 update 066 fix 2 allows remote attackers...CVE-2002-23075.0 MediumDecember 31, 2002
kazaa media desktopSharman Networks KaZaA Media Desktop 1.7.1 allows remote attackers to cause a denial of service ...CVE-2002-2306Public exploit7.8 HighDecember 31, 2002
phpsecure.org immobilierSQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute...CVE-2002-23057.5 HighDecember 31, 2002
myphpsoft myphplinksSQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows...CVE-2002-2304Public exploit7.5 HighDecember 31, 2002
3d3.com shopfactory3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data,...CVE-2002-23037.8 HighDecember 31, 2002
3d3.com shopfactory3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their...CVE-2002-23026.4 MediumDecember 31, 2002
lawson software financialsLawson Financials 8.0, when configured to use a third party relational database, stores usernames...CVE-2002-23013.3 LowDecember 31, 2002
3com webbngss3nbxntsBuffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote...CVE-2002-2300Public exploit7.5 HighDecember 31, 2002
atthat.com thatwarePHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows...CVE-2002-22996.8 MediumDecember 31, 2002
atthat.com thatwarePHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote...CVE-2002-2298Public exploit6.8 MediumDecember 31, 2002
atthat.com thatwarePHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote...CVE-2002-22976.8 MediumDecember 31, 2002
yabbCross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold...CVE-2002-2296Public exploit4.3 MediumDecember 31, 2002
pico server serverBuffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause...CVE-2002-2295Public exploit7.5 HighDecember 31, 2002
symantec enterprise firewall, raptor firewall, velociraptor +2 moreMultiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2...CVE-2002-22945.0 MediumDecember 31, 2002
twofold photos webshots desktopWebshots Desktop screensaver allows local users to bypass the password on the screensaver by...CVE-2002-22934.6 MediumDecember 31, 2002
halycon software iaspDirectory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows...CVE-2002-22925.0 MediumDecember 31, 2002
calisto internet talkerCalisto Internet Talker 0.04 and earlier allows remote attackers to cause a denial of service ...CVE-2002-22917.8 HighDecember 31, 2002
mambo site serverMambo Site Server 4.0.11 installs with a default username and password of admin, which allows...CVE-2002-229010.0 HighDecember 31, 2002
working resources inc. badbluesoinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain...CVE-2002-22895.0 MediumDecember 31, 2002
mambo site serverMambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an...CVE-2002-2288Public exploit5.0 MediumDecember 31, 2002
phpbb advanced quick reply hackPHP remote file inclusion vulnerability in quick_reply.php for phpBB Advanced Quick Reply Hack 1...CVE-2002-2287Public exploit7.5 HighDecember 31, 2002
apt-www-proxyThe parse-get function in utils.c for apt-www-proxy 0.1 allows remote attackers to cause a denial...CVE-2002-22865.0 MediumDecember 31, 2002
broadcom inoculateiteTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free...CVE-2002-22854.3 MediumDecember 31, 2002
netscape communicatorNetscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute...CVE-2002-22846.4 MediumDecember 31, 2002
microsoft windows xpMicrosoft Windows XP with Fast User Switching (FUS) enabled does not remove the "show processes...CVE-2002-22831.9 LowDecember 31, 2002
mcafee virusscanMcAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs...CVE-2002-22826.9 MediumDecember 31, 2002
symantec javaSymantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows...CVE-2002-2281Public exploitEPSS 10.2%10.0 HighDecember 31, 2002
openbsdsyslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when...CVE-2002-22802.1 LowDecember 31, 2002
aldapUnspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote...CVE-2002-227910.0 HighDecember 31, 2002
portail web php web phpCross-site scripting (XSS) vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote...CVE-2002-22784.3 MediumDecember 31, 2002
portail web php web phpSQL injection vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to...CVE-2002-22777.5 HighDecember 31, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open