Latest CVE Feed
-
5.0
MEDIUMCVE-2002-1620
Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary files from a file collection.... Read more
Affected Products : aix_parallel_systems_support_programs- EPSS Score: %0.91
- Published: Apr. 01, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1174
Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.... Read more
- EPSS Score: %4.26
- Published: Apr. 01, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-1175
vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.... Read more
- EPSS Score: %0.05
- Published: Apr. 01, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0078
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.... Read more
Affected Products : internet_explorer- EPSS Score: %20.34
- Published: Mar. 29, 2002
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-0040
Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges.... Read more
Affected Products : irix- EPSS Score: %0.06
- Published: Mar. 28, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0039
rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths.... Read more
Affected Products : irix- EPSS Score: %0.66
- Published: Mar. 28, 2002
- Modified: Apr. 03, 2025
-
6.2
MEDIUMCVE-2002-0162
LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory.... Read more
- EPSS Score: %0.12
- Published: Mar. 27, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0163
Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses.... Read more
- EPSS Score: %3.90
- Published: Mar. 26, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0142
CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long and ends in a series of . (dot) characters.... Read more
Affected Products : pi3web- EPSS Score: %5.68
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0104
AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump.... Read more
Affected Products : aftpd- EPSS Score: %0.92
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0115
Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and core dump) via a malformed ICMP packet.... Read more
Affected Products : snort- EPSS Score: %5.79
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-0120
Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which could allow a local user to obtain sensitive information.... Read more
Affected Products : palm_desktop- EPSS Score: %0.10
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0119
Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, such as nmap with OS detection.... Read more
Affected Products : speed_touch_home- EPSS Score: %0.87
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0118
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.... Read more
Affected Products : ultimate_bulletin_board- EPSS Score: %3.06
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0095
The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed.... Read more
Affected Products : bscw- EPSS Score: %3.06
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-0132
Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable.... Read more
Affected Products : chinput- EPSS Score: %0.15
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-0125
Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as (1) Super Methane Brothers, (2) Star War, (3) Kwirk, (4) Clankanoid, and others, via a long HOME environment variable.... Read more
Affected Products : clanlib- EPSS Score: %0.06
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0108
Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.... Read more
Affected Products : forums- EPSS Score: %0.81
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0135
Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of the ports (1417 - 1420).... Read more
Affected Products : timbuktu_pro- EPSS Score: %4.72
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0144
Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload directory via a .. (dot dot) attack.... Read more
Affected Products : chuid- EPSS Score: %0.78
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025