2002

Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on

An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security se

Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privil

Cross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute arbitrary script as oth

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attachi

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creatin

Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .

Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36

Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily

IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr pa

mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "10

Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumpti

IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vul

Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for atta

Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a large

Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript

home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allows remote attackers to determine the full pathname of the we

Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathnam

MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between client

Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file cont

The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via

Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote

index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when

move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attack

dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the data

The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) vi

Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG t

Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp pag

Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbi

Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.

Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (

The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, whi

PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to deter

IPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is not being filtered, which

The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to caus

ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.

ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling database-in

Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service (crash and reboot) when SOHO

Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrar

phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt t

PostBoard 2.0.1 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corru

The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth c

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial o

Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to ca

Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missi

psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a P

LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET reques

CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in

CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could

bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not u