2002

Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create

Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a

mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types with

Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to ca

vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature i

Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote atta

Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or

Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with

The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified f

The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows

The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attacke

Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the

Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary dire

Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a lo

Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execu

Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arb

Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder a

Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allow

Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL,

Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration u

Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email m

Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash

Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system,

Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mount

Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of

Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in

Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attack

Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML

Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attack

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents

Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive

Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows

BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via

BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid exp

Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an auth

Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current direct

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files a

Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentati

The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which cause

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local

An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on

Buffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41,

Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information S

Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote at

IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV requests that cause a

The remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote att

Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to cause

The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from