Latest CVE Feed
-
7.5
HIGHCVE-2002-0850
Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is decrypted.... Read more
Affected Products : corporate_desktop- EPSS Score: %3.85
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-1127
Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) command line parameter.... Read more
Affected Products : osf_1- EPSS Score: %0.15
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1081
The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a "+" character.... Read more
Affected Products : abyss_web_server- EPSS Score: %0.61
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0897
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.... Read more
Affected Products : localweb2000- EPSS Score: %3.17
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-1642
PostgreSQL 7.2.1 and 7.2.2 allows local users to delete transaction log (pg_clog) data and cause a denial of service (data loss) via the VACUUM command.... Read more
Affected Products : postgresql- EPSS Score: %0.06
- Published: Oct. 03, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1593
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.... Read more
Affected Products : http_server- EPSS Score: %39.13
- Published: Sep. 25, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-1121
SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails... Read more
- EPSS Score: %2.20
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2002-0973
Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel memory via large negative values to the (1) accept, (2) getsockname, and (3) getpeername system calls, and the (4) ve... Read more
Affected Products : freebsd- EPSS Score: %0.09
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0980
The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows remote attackers to execute arbitrary code by injecting it into the error message, then referring to the error mes... Read more
- EPSS Score: %40.45
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0691
Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189.... Read more
Affected Products : internet_explorer- EPSS Score: %15.06
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0979
The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code.... Read more
Affected Products : virtual_machine- EPSS Score: %2.99
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0647
Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code, aka "Buffer Overrun in Legacy Text Formatting ActiveX Control".... Read more
Affected Products : internet_explorer- EPSS Score: %15.52
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0984
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code.... Read more
Affected Products : light- EPSS Score: %2.56
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0989
The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell metacharacters in a link.... Read more
- EPSS Score: %4.95
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0723
Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attackers to read client files or invoke executable objects via the Object tag, aka "Cross Domain Verification in Object Ta... Read more
Affected Products : internet_explorer- EPSS Score: %24.17
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0978
Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attack with modified TGT and TGN parameters in a call to the "Persist" function.... Read more
Affected Products : file_transfer_manager- EPSS Score: %3.61
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-0981
Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line.... Read more
- EPSS Score: %0.34
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-1122
Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response.... Read more
Affected Products : internet_scanner- EPSS Score: %6.84
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0977
Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to execute arbitrary code via a long TS value.... Read more
Affected Products : file_transfer_manager- EPSS Score: %5.38
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0861
Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.... Read more
- EPSS Score: %6.15
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025