Latest CVE Feed
-
7.5
HIGHCVE-2002-0834
Buffer overflow in the ISIS dissector for Ethereal 0.9.5 and earlier allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets.... Read more
- EPSS Score: %1.71
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0724
Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2... Read more
- EPSS Score: %40.26
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0989
The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell metacharacters in a link.... Read more
- EPSS Score: %4.95
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0984
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code.... Read more
Affected Products : light- EPSS Score: %2.56
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2002-0971
Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box.... Read more
- EPSS Score: %0.09
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
6.4
MEDIUMCVE-2002-0976
Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet (com.ms.xml.dso.XMLDSO.class) and modifies the base URL to point to the local system, which is trusted by the apple... Read more
Affected Products : internet_explorer- EPSS Score: %57.72
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0722
Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to misrepresent the source of a file in the File Download dialogue box to trick users into thinking that the file type is safe to download, aka "File Origin Spoofing."... Read more
Affected Products : internet_explorer- EPSS Score: %5.73
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-0987
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges.... Read more
- EPSS Score: %0.15
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0860
The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file.... Read more
- EPSS Score: %24.97
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-1125
FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory.... Read more
Affected Products : freebsd- EPSS Score: %0.21
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0975
Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter.... Read more
Affected Products : directx_files_viewer_control- EPSS Score: %9.98
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0727
The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method.... Read more
- EPSS Score: %9.52
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0985
Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly ... Read more
- EPSS Score: %1.30
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0726
Buffer overflow in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to execute arbitrary code via a long server name field.... Read more
Affected Products : tsac_activex_control- EPSS Score: %18.75
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0376
Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field.... Read more
Affected Products : quicktime- EPSS Score: %3.82
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0977
Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to execute arbitrary code via a long TS value.... Read more
Affected Products : file_transfer_manager- EPSS Score: %5.38
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-0981
Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line.... Read more
- EPSS Score: %0.34
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-1122
Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response.... Read more
Affected Products : internet_scanner- EPSS Score: %6.84
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0978
Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attack with modified TGT and TGN parameters in a call to the "Persist" function.... Read more
Affected Products : file_transfer_manager- EPSS Score: %3.61
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0723
Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attackers to read client files or invoke executable objects via the Object tag, aka "Cross Domain Verification in Object Ta... Read more
Affected Products : internet_explorer- EPSS Score: %24.17
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025