Skip to content
OpenAdvisories

Archive

November 2002

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 22
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 103
  11. 11 
  12. 12 
  13. 13 
  14. 1417
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 218
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 273
  28. 28 
  29. 29 
  30. 30 

33 results · Feed

  • Unscored —

    Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchron…

  • Unscored —
    CVE-2002-1322 Public exploit

    Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (cras…

  • Unscored —
    CVE-2002-1254 Public exploit EPSS 54%

    Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information …

  • Unscored —

    Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as…

  • Unscored —

    Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attac…

  • Unscored —

    Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier…

  • Unscored —

    Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive…

  • Unscored —

    importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary…

  • Unscored —

    Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allow…

  • Unscored —

    Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allow…

  • Unscored —
    CVE-2002-1293 EPSS 15%

    The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker cl…

  • Unscored —

    Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and ear…

  • Unscored —
    CVE-2002-1286 EPSS 21%

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute s…

  • Unscored —
    CVE-2002-1291 EPSS 18%

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files …

  • Unscored —

    Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an aut…

  • Unscored —

    Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gai…

  • Unscored —

    An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on…

  • Unscored —

    Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote at…

  • Unscored —
    CVE-2002-1292 EPSS 22%

    The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attacke…

  • Unscored —

    runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.

  • Unscored —
    CVE-2002-1288 EPSS 17%

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current direc…

  • Unscored —
    CVE-2002-1289 EPSS 16%

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process mem…

  • Unscored —
    CVE-2002-1295 EPSS 15%

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2002-1294 EPSS 15%

    The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Java…

  • Unscored —
    CVE-2002-1287 EPSS 20%

    Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers…

  • Unscored —

    Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for t…

  • Unscored —
    CVE-2002-1290 EPSS 14%

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the content…

  • Unscored —

    Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote a…

  • Unscored —
    CVE-2002-1275 Public exploit

    Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to exec…

  • Unscored —
    CVE-2002-1238 Public exploit

    Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via…

  • Unscored —
    CVE-2002-0869 EPSS 24%

    Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through …

  • Unscored —
    CVE-2002-1181 EPSS 39%

    Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information …