CVE-2006-1402

Buffer overflow in csDoom (client/server Doom)

CVE-2005-1402

CVE-2005-1402 affects older versions of the NeL library (as used in Mtp-Target 1.2.2 and earlier). The flaw is an integer signedness error in a STLport call, not caught by a signed comparison, allowing remote attackers to cause a denial of service via memory consumption or a server crash. The pro...

CVE-2004-1402

The CVE-2004-1402 entry concerns iWebNegar, a PHP web log application. The vulnerability is a SQL injection affecting multiple entry points: the string parameter for index.php, comments.php, and the administrator login page. The underlying cause is unsanitized input that allows attackers to injec...

CVE-2003-1402

PHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the urlhit parameter, a different vulnerability than CVE-2006-5015...

CVE-2002-1402

CVE-2002-1402 refers to buffer overflows in the TZ and SET TIME ZONE environment variables for PostgreSQL 7.2.1 and earlier, enabling local users to cause a denial of service and possibly execute arbitrary code. Connected documents confirm this issue across multiple distributions with multiple re...

CVE-2001-1402

Bugzilla before 2.14 does not properly escape untrusted parameters, which could allow remote attackers to conduct unauthorized activities via cross-site scripting CSS and possibly SQL injection attacks on 1 the product or output form variables for reports.cgi, 2 the voteon, bugid, and user...

CVE-2001-1402

Bugzilla before 2.14 does not properly escape untrusted parameters, enabling cross-site scripting (XSS) and potentially SQL injection via multiple input points. Affected areas include reports.cgi (product/output form variables), showvotes.cgi (voteon, bug_id, user), createaccount.cgi (email), sho...

CVE-1999-1402

Technical details about CVE-1999-1402 are not publicly available in the provided documents; monitor for updates.

CVE-2001-1402

Bugzilla before 2.14 does not properly escape untrusted parameters, which could allow remote attackers to conduct unauthorized activities via cross-site scripting CSS and possibly SQL injection attacks on 1 the product or output form variables for reports.cgi, 2 the voteon, bugid, and user...

CVE-1999-1402

The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket...