Latest CVE Feed
-
5.0
MEDIUMCVE-2002-0576
ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message.... Read more
Affected Products : coldfusion_server- EPSS Score: %1.09
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0593
Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI.... Read more
- EPSS Score: %3.40
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0402
Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code while Ethereal is parsing keysyms.... Read more
Affected Products : ethereal- EPSS Score: %2.68
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0401
SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer.... Read more
- EPSS Score: %5.82
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0380
Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.... Read more
- EPSS Score: %4.37
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0607
members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INITIAL.... Read more
Affected Products : snitz_forums_2000- EPSS Score: %1.74
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0611
Directory traversal vulnerability in FileSeek.cgi allows remote attackers to read arbitrary files via a ....// (modified dot dot) in the (1) head or (2) foot parameters, which are not properly filtered.... Read more
Affected Products : fileseek- EPSS Score: %5.45
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0388
Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.... Read more
Affected Products : mailman- EPSS Score: %3.15
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0404
Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (memory consumption).... Read more
Affected Products : ethereal- EPSS Score: %1.82
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0400
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.... Read more
Affected Products : bind- EPSS Score: %27.73
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0403
DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet that causes Ethereal to enter an infinite loop.... Read more
Affected Products : ethereal- EPSS Score: %1.82
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0597
LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445.... Read more
Affected Products : windows_2000- EPSS Score: %55.58
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0575
Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled, allows remote and local authenticated users to gain privileges.... Read more
Affected Products : openssh- EPSS Score: %3.40
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-0042
Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly processed by XFS.... Read more
Affected Products : irix- EPSS Score: %0.14
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0583
WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp directory, which allows remote attackers to read the reports via a brute force attack.... Read more
Affected Products : xpede- EPSS Score: %1.17
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0610
Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows attackers to gain privileges.... Read more
Affected Products : mpe_ix- EPSS Score: %2.65
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0581
WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter in the sprc.asp script.... Read more
Affected Products : xpede- EPSS Score: %1.65
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0600
Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request.... Read more
- EPSS Score: %1.67
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0596
WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message.... Read more
Affected Products : reporting_center- EPSS Score: %0.71
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0595
Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory.... Read more
Affected Products : reporting_center- EPSS Score: %5.39
- Published: Jun. 18, 2002
- Modified: Apr. 03, 2025