Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
December

CVEs published in December 2002

874 vulnerabilities, 73 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

leung e-guestCross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote...CVE-2002-2376Public exploit4.3 MediumDecember 31, 2002
stalker communigate proDirectory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows...CVE-2002-23755.0 MediumDecember 31, 2002
sun patchproUnspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors...CVE-2002-237410.0 HighDecember 31, 2002
apple tcp ip configuration utilityThe default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640...CVE-2002-23737.5 HighDecember 31, 2002
ibm infoprint 21The telnet server in Infoprint 21 running controller software before 1.056007 allows remote...CVE-2002-23725.0 MediumDecember 31, 2002
linksys wet11Linksys WET11 firmware 1.31 and 1.32 allows remote attackers to cause a denial of service (crash)...CVE-2002-23717.8 HighDecember 31, 2002
sws simple web serverSWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash...CVE-2002-2370Public exploit5.0 MediumDecember 31, 2002
perception liteservePerception LiteServe 2.0 allows remote attackers to read password protected files via a leading "...CVE-2002-23695.0 MediumDecember 31, 2002
nec socks 5Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a...CVE-2002-236810.0 HighDecember 31, 2002
socks5Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a...CVE-2002-23677.8 HighDecember 31, 2002
cerulean studios trillianBuffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to...CVE-2002-23666.8 MediumDecember 31, 2002
springer verlag berlin heidelberg simple waisSimple WAIS (SWAIS) 1.11 allows remote attackers to execute arbitrary commands via the shell...CVE-2002-236510.0 HighDecember 31, 2002
sourceforge php ticketCross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to...CVE-2002-23644.3 MediumDecember 31, 2002
hp hp-uxVJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges.CVE-2002-23637.2 HighDecember 31, 2002
sourceforge mymarketCross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote...CVE-2002-2362Public exploit4.3 MediumDecember 31, 2002
yahoo messengerThe installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could...CVE-2002-23615.8 MediumDecember 31, 2002
webminThe RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges,...CVE-2002-2360Public exploit9.3 HighDecember 31, 2002
mozillaCross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote...CVE-2002-2359Public exploit4.3 MediumDecember 31, 2002
opera software web browserCross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6...CVE-2002-2358Public exploit4.3 MediumDecember 31, 2002
mailenableMailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash)...CVE-2002-2357Public exploit5.0 MediumDecember 31, 2002
hamweatherHAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive...CVE-2002-23566.4 MediumDecember 31, 2002
netgear fm114pNetgear FM114P firmware 1.3 wireless firewall, when configured to backup configuration...CVE-2002-23557.1 HighDecember 31, 2002
netgear fm114pNetgear FM114P firmware 1.3 wireless firewall allows remote attackers to cause a denial of...CVE-2002-23547.8 HighDecember 31, 2002
tftpd32tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full...CVE-2002-2353Public exploit6.4 MediumDecember 31, 2002
neosoft neobookThe NBActiveX.ocx ActiveX control in NeoBook 4 allows remote attackers to install and execute...CVE-2002-23525.8 MediumDecember 31, 2002
qualcomm eudoraEudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary...CVE-2002-2351Public exploit6.4 MediumDecember 31, 2002
phpoutsourcing zorumCross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in...CVE-2002-23504.3 MediumDecember 31, 2002
phpbb phpbbmodphpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to...CVE-2002-2349Public exploit5.0 MediumDecember 31, 2002
authoriaCross-site scripting (XSS) vulnerability in athcgi.exe in Authoria HR allows remote attackers to...CVE-2002-2348Public exploit4.3 MediumDecember 31, 2002
oracle application serverCross-site scripting (XSS) vulnerability in Oracle Java Server Page (OJSP) demo files (1)...CVE-2002-23474.3 MediumDecember 31, 2002
phpbbphpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address...CVE-2002-23465.0 MediumDecember 31, 2002
oracle application serverOracle 9i Application Server 9.0.2 stores the web cache administrator interface password in...CVE-2002-23457.5 HighDecember 31, 2002
ensim webpplianceEnsim WEBppliance 3.0 and 3.1 allows remote attackers to read mail intended for other users by...CVE-2002-23445.0 MediumDecember 31, 2002
noccCross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows remote attackers to...CVE-2002-2343Public exploit4.3 MediumDecember 31, 2002
joe depasquale bannermaticBannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban.bak, (3) ban.dat and (4) banmat.pwd data...CVE-2002-23425.0 MediumDecember 31, 2002
sonicwall soho3Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows...CVE-2002-2341Public exploit4.3 MediumDecember 31, 2002
phorumCross-site scripting (XSS) vulnerability in read.php in Phorum 3.3.2a allows remote attackers to...CVE-2002-23404.3 MediumDecember 31, 2002
script shed ssgbookCross-site scripting (XSS) vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows...CVE-2002-2339Public exploit4.3 MediumDecember 31, 2002
mozilla, netscape communicator, navigator +2 moreThe POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier,...CVE-2002-2338Public exploit5.0 MediumDecember 31, 2002
kaspersky lab anti-hackerKaspersky Anti-Hacker 1.0, when configured to automatically block attacks, allows remote...CVE-2002-23375.0 MediumDecember 31, 2002
symantec norton personal firewallNorton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote...CVE-2002-2336Public exploit4.3 MediumDecember 31, 2002
john drake killer protectionKiller Protection 1.0 stores the vars.inc include file under the web root with insufficient...CVE-2002-2335Public exploit5.0 MediumDecember 31, 2002
joseph allen joeJoe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files...CVE-2002-23343.6 LowDecember 31, 2002
kdeBuffer overflow in konqueror in KDE 2.1 through 3.0 and 3.0.2 allows remote attackers to cause a...CVE-2002-23335.0 MediumDecember 31, 2002
opera software web browserBuffer overflow in Opera 6.01 allows remote attackers to cause a denial of service (crash) via an...CVE-2002-23325.0 MediumDecember 31, 2002
cascadesoft w3mailW3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory...CVE-2002-23315.8 MediumDecember 31, 2002
uninet statsplusCross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to...CVE-2002-23305.0 MediumDecember 31, 2002
mirabilis icqICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service (CPU...CVE-2002-23297.8 HighDecember 31, 2002
microsoft windows 2000Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows...CVE-2002-2328EPSS 16.6%7.1 HighDecember 31, 2002
sun sunosUnspecified vulnerability in the environmental monitoring subsystem in Solaris 8 running on Sun...CVE-2002-23274.9 MediumDecember 31, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open