Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote attackers to conduct activ…Check if you run itEPSS 2.53%Dec 31, 2002
- High7.5The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers…Check if you run itEPSS 2.53%Dec 31, 2002
- High7.2Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window.Check if you run itEPSS 3.17%Dec 31, 2002
- Medium5.0The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service (crash) via a…Check if you run itEPSS 3.88%Dec 31, 2002
- Low2.1Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses tha…Check if you run itEPSS 4.70%Dec 31, 2002
- Medium5.0Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash or memory consumption) via…Check this weekEPSS 13.58%Dec 31, 2002
- High7.5Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.Check if you run itEPSS 6.98%Dec 31, 2002
- High7.5mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script…Check this weekEPSS 17.41%Dec 31, 2002
- High7.5The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthoriz…Check this weekEPSS 16.12%Dec 31, 2002
- Medium5.0CVE-2002-1790 is listed by inventory_critical.Check this weekEPSS 33.97%Dec 31, 2002
- Medium4.6Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument.Check if you run itEPSS 1.05%Dec 31, 2002
- UnknownMicrosoft Internet Information Services (IIS) Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 16.05%Dec 31, 2002
- Critical10.0Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interfac…Check if you run itEPSS 9.06%Dec 26, 2002
- High7.5Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote at…Check if you run itEPSS 2.97%Dec 26, 2002
- High7.5filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to ex…Check if you run itEPSS 4.92%Dec 26, 2002
- Critical10.0jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows rem…Check if you run itEPSS 8.20%Dec 26, 2002
- Critical10.0Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be use…Check if you run itEPSS 3.68%Dec 26, 2002
- Medium6.2Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demo…Check if you run itEPSS 0.33%Dec 26, 2002
- High7.5libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_…Check if you run itEPSS 6.78%Dec 23, 2002
- High7.5The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.Check this weekEPSS 23.51%Dec 23, 2002
- High7.5The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-characte…Check this weekEPSS 20.45%Dec 23, 2002
- Medium5.0Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service (crash or hang) in mysq…Check if you run itEPSS 3.64%Dec 23, 2002
- High7.5Common Unix Printing System (CUPS) memcpy() calls VulnerabilityPatch nowKEVEPSS 15.47%Dec 19, 2002
- Critical9.8Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long…Check if you run itEPSS 7.08%Dec 18, 2002
- Low2.1Mac OS X 10.2.2 allows local users to read files that only allow write access via the map_fd() Mach system call.Check if you run itEPSS 0.33%Dec 11, 2002
Sort