Latest CVE Feed
-
7.5
HIGHCVE-2002-0706
UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.... Read more
- EPSS Score: %0.47
- Published: Oct. 10, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0705
The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory, which allows remote attackers to obtain valid usernames and crack the passwords.... Read more
- EPSS Score: %1.08
- Published: Oct. 10, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0707
The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU consumption) via large GET requests, possibly due to a buffer overflow.... Read more
- EPSS Score: %0.71
- Published: Oct. 10, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0709
SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs.... Read more
- EPSS Score: %0.35
- Published: Oct. 10, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0694
The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files fol... Read more
Affected Products : windows_2000 windows_xp windows_98 windows_nt windows_98se windows_me windows_2000_terminal_services- EPSS Score: %28.96
- Published: Oct. 10, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0708
Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP request containing ... (triple dot) sequences.... Read more
- EPSS Score: %3.78
- Published: Oct. 10, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0692
Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU consumption) or run arbitrary code, respectively, via a certain type of web file r... Read more
- EPSS Score: %38.25
- Published: Oct. 10, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0693
Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long param... Read more
Affected Products : windows_2000 windows_xp windows_98 windows_nt windows_98se windows_me windows_2000_terminal_services- EPSS Score: %53.82
- Published: Oct. 10, 2002
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2002-0838
Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript fi... Read more
- EPSS Score: %4.43
- Published: Oct. 10, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0370
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Window... Read more
Affected Products : windows_xp winzip lotus_notes windows_me stuffit_expander keyview_viewing_sdk windows_98_plus_pack- EPSS Score: %32.27
- Published: Oct. 10, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0699
Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's syst... Read more
- EPSS Score: %4.55
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
7.1
HIGHCVE-2002-1024
Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144).... Read more
- EPSS Score: %1.40
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-0991
Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S, (5) -N, or (6) -u parameters.... Read more
- EPSS Score: %0.86
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0953
globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter.... Read more
Affected Products : php_address- EPSS Score: %3.20
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1087
The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request.... Read more
Affected Products : ezcontents- EPSS Score: %0.52
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-1129
Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.... Read more
- EPSS Score: %0.10
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-1015
RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a we... Read more
- EPSS Score: %1.41
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1068
The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large HTTP POST request.... Read more
Affected Products : dp-303- EPSS Score: %0.49
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-1135
modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP source code via an inc_prefix parameter that points to the malicious code.... Read more
Affected Products : phpwebsite- EPSS Score: %5.11
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-1109
securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service (CPU consumption) via a malformed TAR file, possibly via an incorrect file size parameter.... Read more
Affected Products : virus_scanner- EPSS Score: %0.07
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025