2002

Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchroni

TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to byp

Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execu

Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arb

Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder a

Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allow

Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL,

Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration u

Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email m

Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash

Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system,

Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mount

Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of

Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in

Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attack

Mac OS X 10.2.2 allows local users to read files that only allow write access via the map_fd() Mach system call.

The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of ser

The libthread library (libthread.so.1) for Solaris 2.5.1 through 8 allows local users to cause a denial of service (hang

Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq varia

Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as

Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 th

Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attacker

Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earl

Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote att

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute sc

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memo

The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attacker

The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker cla

The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Javas

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (c

Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly r

Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that

Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows

Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier

Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for th

Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain

runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.

Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML

Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attack

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents

Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive

Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows

BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via

BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid exp

Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an auth

Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current direct

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files a

Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentati