CVE-2002-1683

CVE-2002-1683 is an XSS vulnerability in BadBlue Personal Edition 1.7.3 where an attacker can remotely inject a script via the cleanSearchString() function, causing the script to run in other users’ contexts. The connected sources confirm the vulnerability details but do not provide exploitation ...

CVE-2002-1777

Symantec Norton AntiVirus (NAV) 2002 is affected. The issue lets an attacker bypass e-mail scanning by placing an allowed filename in the Content-Type header with an excluded extension (e.g., .nch, .dbx) while using a malicious extension in the Content-Disposition header (used by Outlook to obtai...

CVE-2005-2002

CVE-2005-2002 corresponds to a SQL injection in Mambo 4.5.2.2 and earlier through the user_rating parameter in content.php, allowing remote attackers to alter SQL queries. The CVE entry is supported by multiple connected advisories and scanners (e.g., OpenVAS/Nessus) referencing Mambo/Open Source...

MS05-025: Cumulative Security Update for Internet Explorer (883939)

The remote host is missing IE Cumulative Security Update 883939. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18490;...

Non Compliant IKE (CVE-2002-0852)

...

CVE-2002-1665

CVE-2002-1665 describes a buffer overflow in Yahoo! Messenger prior to February 2002, exploitable via a long set_buddygrp field that could cause a crash and potentially allow arbitrary code execution. The affected component is Yahoo! Messenger, with the root cause being an overflow in handling th...

CVE-2002-1664

Yahoo! Messenger vulnerability CVE-2002-1664: Before February 2002, remote attackers could add arbitrary users to another user’s buddy list, potentially exposing sensitive information. The NVD/CVE entries describe this as a buddy-list manipulation issue with partial confidentiality risk; no expli...

CVE-2002-1663

Monkey HTTP Server (monkeyd) is affected by CVE-2002-1663 through the Post_Method function in method.c, where a crafted POST request with an invalid or missing Content-Length header can crash the server and cause a denial of service. The vulnerability is reported for versions prior to 0.5.1. The ...

CVE-2002-1662

CVE-2002-1662 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11. The issues allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the "Your name" field during account registration. This is described in the NVD e...

CVE-2002-1659

userprofile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the userid variable...

CVE-2004-2002

Technical details for CVE-2004-2002 are not publicly available in the provided documents; no information on affected products, versions, root cause, or fix is present. Monitor for updates.

CVE-2002-1659

CVE-2002-1659 affects PortalApp 2.2 where user_profile.asp allows local users to gain privileges by modifying the user_id variable. The root cause is manipulating a user_id parameter in the profile page, enabling local privilege escalation with complete impact on confidentiality, integrity, and a...

CVE-2002-1660

CVE-2002-1660 : A vulnerability in calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter. Affected product: vBulletin (calendar.php) prior to version 2.2.0. Root cause: unsafely handling shell commands throug...

CVE-2002-1661

The CVE-2002-1661 issue affects the Leafnode NNTP server, specifically versions 1.9.20 through 1.9.29, where processing a cross-posted article to multiple groups can trigger an infinite-loop DoS. The vulnerability occurs when one target group name is a prefix of another, and the article is reques...

CVE-2002-1370

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-1367. Reason: This CAN was originally assigned for the theft of root certificates in CUPS, but it was later deemed to be a legitimate result of exploiting a different vulnerability, CVE-2002-1367, so it is not a distinct...

CVE-2002-0646

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-0371. Reason: This candidate is a reservation duplicate of CVE-2002-0371. Notes: CVE-2002-0371 should be used instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidenta...

CVE-2002-1658

CVE-2002-1658 describes a buffer overflow in htdigest used by Apache 1.3.26/1.3.27 that may allow arbitrary code execution via a long user argument. The vulnerability is tied to htdigest functionality, with local access as the attack vector and no setuid/setgid context; escalation of privileges i...

Microsoft Jet Database - 'msjet40.dll' Code Execution (Reverse Shell) (2)

Microsoft Jet msjet40.dll Reverse Shell Exploit Based on the exploit written by S.Pearson and Python version by coded by Tal zeltzer XP/sp2 fixed version by Jean Luc import sys import struct Addresses are compatible with Windows XP Service Pack 1 and Service Pack 2 EIP = "\x47\xAD\x05\x30"; Use...

CVE-2002-1370

CVE-2002-1370 is a placeholder/rejected candidate; the active vulnerability is CVE-2002-1367 in Common Unix Printing System (CUPS). CVE-2002-1367 describes remote addition of printers without authentication via a UDP packet, which can be leveraged to unauthorized activities such as theft of the l...

CVE-2002-1370

...