Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 4.6

    MEDIUM
    CVE-2002-1268

    Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD."... Read more

    Affected Products : mac_os_x
    • EPSS Score: %0.07
    • Published: Dec. 11, 2002
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2002-1266

    Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via Disk Image File."... Read more

    Affected Products : mac_os_x
    • EPSS Score: %0.07
    • Published: Dec. 11, 2002
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2002-1183

    Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862).... Read more

    Affected Products : windows_98 windows_nt windows_98se
    • EPSS Score: %11.91
    • Published: Dec. 11, 2002
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-2002-1318

    Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a lit... Read more

    Affected Products : samba irix cifs-9000_server
    • EPSS Score: %73.41
    • Published: Dec. 11, 2002
    • Modified: Apr. 03, 2025
  • 4.3

    MEDIUM
    CVE-2002-1335

    Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies.... Read more

    Affected Products : w3m
    • EPSS Score: %1.14
    • Published: Dec. 11, 2002
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2002-1323

    Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.... Read more

    • EPSS Score: %0.08
    • Published: Dec. 11, 2002
    • Modified: Apr. 03, 2025
  • 2.1

    LOW
    CVE-2002-1587

    The libthread library (libthread.so.1) for Solaris 2.5.1 through 8 allows local users to cause a denial of service (hang) of an application that uses libthread by causing the application to wait for a certain mutex.... Read more

    Affected Products : solaris sunos
    • EPSS Score: %0.06
    • Published: Dec. 04, 2002
    • Modified: Apr. 03, 2025
  • 2.1

    LOW
    CVE-2002-1586

    Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null, which triggers a null dereference.... Read more

    Affected Products : solaris sunos
    • EPSS Score: %0.07
    • Published: Dec. 03, 2002
    • Modified: Apr. 03, 2025
  • 6.4

    MEDIUM
    CVE-2002-1290

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard via an applet that accesses the (1) ClipBoardGetText and (2) ClipBoardSetText methods of the INativeServices class.... Read more

    Affected Products : java_virtual_machine
    • EPSS Score: %5.14
    • Published: Nov. 29, 2002
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2002-1279

    Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via certain entries in the configuration file (-C option).... Read more

    Affected Products : masqmail
    • EPSS Score: %0.14
    • Published: Nov. 29, 2002
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2002-1588

    Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and crash) via a malformed mail attachment.... Read more

    Affected Products : solaris openwindows
    • EPSS Score: %0.74
    • Published: Nov. 29, 2002
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2002-1283

    Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an authentication request with a long Distinguished Name (DN) attribute.... Read more

    Affected Products : emframe
    • EPSS Score: %0.37
    • Published: Nov. 29, 2002
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2002-1308

    Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression.... Read more

    Affected Products : linux mozilla navigator
    • EPSS Score: %5.42
    • Published: Nov. 29, 2002
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2002-1285

    runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.... Read more

    Affected Products : suse_linux
    • EPSS Score: %0.15
    • Published: Nov. 29, 2002
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2002-1295

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions (such as private c... Read more

    Affected Products : java_virtual_machine
    • EPSS Score: %3.07
    • Published: Nov. 29, 2002
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2002-1221

    BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.... Read more

    Affected Products : freebsd bind openbsd
    • EPSS Score: %3.66
    • Published: Nov. 29, 2002
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2002-1220

    BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.... Read more

    Affected Products : freebsd bind openbsd
    • EPSS Score: %19.18
    • Published: Nov. 29, 2002
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2002-1142

    Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stu... Read more

    • EPSS Score: %83.04
    • Published: Nov. 29, 2002
    • Modified: Apr. 03, 2025
  • 4.3

    MEDIUM
    CVE-2002-1276

    An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on the PHP_SELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks.... Read more

    Affected Products : squirrelmail linux
    • EPSS Score: %0.64
    • Published: Nov. 29, 2002
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2002-1219

    Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR).... Read more

    Affected Products : freebsd bind openbsd
    • EPSS Score: %7.08
    • Published: Nov. 29, 2002
    • Modified: Apr. 03, 2025
Showing 20 of 292503 Results