Latest CVE Feed
-
7.2
HIGHCVE-2002-1503
Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long MON_WORK_DIR environment variable or -w (workdir) argument to (1) afd, (2) afdcmd, (3) afd_ctrl, (4) init_afd, (5) mafd, (6) mon_ctrl, ... Read more
Affected Products : afd- EPSS Score: %0.23
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1523
Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via (1) ../ (dot-dot slash) or (2) ..\ (dot-dot backslash) sequences.... Read more
Affected Products : mini_server- EPSS Score: %0.65
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
6.2
MEDIUMCVE-2002-1512
xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dscheck.dd temporary file.... Read more
Affected Products : bru- EPSS Score: %0.40
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0179
Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control... Read more
- EPSS Score: %35.64
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2002-1519
Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password... Read more
- EPSS Score: %3.68
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1525
Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or (3) an absolute pathname to port 6017.... Read more
- EPSS Score: %3.45
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1522
Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument.... Read more
Affected Products : powerftp- EPSS Score: %15.28
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
3.6
LOWCVE-2002-1518
mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories.... Read more
Affected Products : irix- EPSS Score: %0.05
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1527
emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error that includes the pathname in the resulting error message.... Read more
Affected Products : emu_webmail- EPSS Score: %4.31
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-1500
Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FD_SETSIZE, which are... Read more
Affected Products : netbsd- EPSS Score: %0.14
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1515
Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) sequences in the img parameter.... Read more
Affected Products : coolforum- EPSS Score: %1.48
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-1514
gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.... Read more
Affected Products : interbase- EPSS Score: %0.40
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1504
Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a URL.... Read more
Affected Products : webserver_4_everyone- EPSS Score: %0.46
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1485
The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service (crash) via certain strings such as "P > O < C".... Read more
Affected Products : trillian- EPSS Score: %0.57
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-1502
Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from the user's .breakyhighscores file to the target file.... Read more
Affected Products : xbreaky- EPSS Score: %0.18
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2002-1495
Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via (1) attached file names in the Read Mail feature, (2) text/html mails that are displayed in a pop-up window, and (3) certain malicio... Read more
Affected Products : jawmail- EPSS Score: %1.35
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0172
Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument.... Read more
Affected Products : php- EPSS Score: %22.20
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-1506
Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated.... Read more
Affected Products : linuxconf- EPSS Score: %0.46
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1487
The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messages (1) 206, (2) 211, (3) 213, (4) 214, (5) 215, (6) 217, (7) 218, (8) 243, (9) 302, (10) 317, (11) 324, (12) 332,... Read more
Affected Products : trillian- EPSS Score: %15.18
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-1505
SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter.... Read more
Affected Products : burning_board- EPSS Score: %0.33
- Published: Apr. 02, 2003
- Modified: Apr. 03, 2025