| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2002-0942 | 7.5 | Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartProf, (2) xp_logattach_setport, or (3) xp_logattach. | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-0941 | 4.6 | The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could al | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-0938 | 7.5 | Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe. | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-0937 | 5.0 | The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null). | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-0934 | 6.4 | Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the middle of a .. (dot dot) sequence in the parameters | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-0933 | 7.5 | Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks. | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-0932 | 6.4 | SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations (1) detailticket, (2) editticket, or (3) u | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-0931 | 7.5 | Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket is created by a support assistant, via the "id" pa | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-0930 | 5.0 | Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command. | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-0929 | 5.0 | Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests. | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: