Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem.Check if you run itEPSS 0.31%Dec 11, 2002
- Medium4.6Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD."Check if you run itEPSS 0.32%Dec 11, 2002
- Medium5.0Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration i…Check if you run itEPSS 1.54%Dec 11, 2002
- Medium4.6Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via Disk Image File."Check if you run itEPSS 0.32%Dec 11, 2002
- Medium5.0The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers…Check if you run itEPSS 2.50%Nov 12, 2002
- Low2.6CVE-2002-1233 is listed by inventory_critical.Check if you run itEPSS 0.56%Nov 4, 2002
- Medium5.0IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial…Check if you run itEPSS 2.47%Nov 4, 2002
- Critical10.0The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine (MSDE) 1.0, and Microsoft Desktop Engine (MSD…Check if you run itEPSS 8.34%Oct 28, 2002
- UnknownKerberos v4compatibility Administration Daemon (kadmind4) Remote Code ExecutionPatch nowKEVEPSS 15.10%Oct 22, 2002
- Medium5.0Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI enabled.Check this weekEPSS 14.95%Oct 11, 2002
- Medium5.0The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files v…Check this weekEPSS 18.65%Oct 11, 2002
- High7.5Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, writes output files for scheduled jobs under it…Check if you run itEPSS 4.71%Oct 11, 2002
- High7.5Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Mi…Check if you run itEPSS 9.39%Oct 11, 2002
- High7.8Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "data…Check if you run itEPSS 1.45%Oct 11, 2002
- High7.5Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a den…Check this weekEPSS 21.42%Oct 11, 2002
- Medium6.8Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for…Check this weekEPSS 95.09%Oct 11, 2002
- High7.2The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as roo…Check if you run itEPSS 0.94%Oct 11, 2002
- Medium5.0The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob…Check this weekEPSS 27.31%Oct 4, 2002
- Medium5.0Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of re…Check if you run itEPSS 7.85%Oct 4, 2002
- Medium6.8The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Wind…Check this weekEPSS 15.76%Oct 4, 2002
- Medium5.0mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a…Check if you run itEPSS 7.04%Sep 25, 2002
- High7.5Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code…Check this weekEPSS 77.71%Sep 24, 2002
- High7.5Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.Check if you run itEPSS 7.82%Sep 24, 2002
- High7.5Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.Check this weekEPSS 26.17%Sep 5, 2002
- Critical10.0Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileg…Check this weekEPSS 46.31%Sep 5, 2002
Sort