Latest CVE Feed
-
7.5
HIGHCVE-2002-0647
Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code, aka "Buffer Overrun in Legacy Text Formatting ActiveX Control".... Read more
Affected Products : internet_explorer- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
2.6
LOWCVE-2002-1126
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, includin... Read more
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0724
Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2... Read more
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0834
Buffer overflow in the ISIS dissector for Ethereal 0.9.5 and earlier allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets.... Read more
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-1120
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.... Read more
Affected Products : savant_web_server- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2002-0972
Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via long arguments to the functions (1) lpad or (2) rpad.... Read more
Affected Products : postgresql- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-0981
Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line.... Read more
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0723
Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attackers to read client files or invoke executable objects via the Object tag, aka "Cross Domain Verification in Object Ta... Read more
Affected Products : internet_explorer- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2002-0973
Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel memory via large negative values to the (1) accept, (2) getsockname, and (3) getpeername system calls, and the (4) ve... Read more
Affected Products : freebsd- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-1121
SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails... Read more
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0980
The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows remote attackers to execute arbitrary code by injecting it into the error message, then referring to the error mes... Read more
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0985
Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly ... Read more
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0979
The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code.... Read more
Affected Products : virtual_machine- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-0986
The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy."... Read more
Affected Products : php- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-1615
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader.... Read more
- Published: Sep. 13, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-1612
Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.... Read more
- Published: Sep. 13, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-1613
Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.... Read more
- Published: Sep. 10, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-1614
Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.... Read more
- Published: Sep. 09, 2002
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0855
Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature.... Read more
Affected Products : mailman- Published: Sep. 05, 2002
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-0720
A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code.... Read more
- Published: Sep. 05, 2002
- Modified: Apr. 03, 2025