1453 matches found
CVE-2002-1367
Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...
CVE-2002-1367
Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...
CVE-2002-1295
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service crash and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions such as private constructors by providing the class name in th...
CVE-2002-1295
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service crash and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions such as private constructors by providing the class name in th...
CVE-2002-1294
CVE-2002-1294 affects the Microsoft Java implementation used by Internet Explorer. The vulnerability arises when HTML object references to applets are exposed via JavaScript, allowing a remote attacker to cause a denial-of-service crash (illegal memory accesses) and potentially perform other unau...
CVE-2002-1295
The CVE-2002-1295 entry concerns the Microsoft Java VM used by Internet Explorer. The vulnerability arises when HTML applet tags bypass Java class restriction checks by supplying the class name in the code parameter, allowing remote attackers to cause a crash (denial of service) and potentially p...
CVE-2002-1217
Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses and domain...
CVE-2002-1217
The CVE-2002-1217 entry describes a Cross-Frame scripting vulnerability in the WebBrowser control as used by Internet Explorer 5.5 and 6.0. The issue arises when script accesses the Document property, bypassing / domain restrictions, enabling remote attackers to execute arbitrary code, read arbit...
CVE-2002-0932
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations 1 detailticket, 2 editticket, or 3 updateticketlog...
CVE-2002-0725
NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file...
CVE-2001-1402
Bugzilla before 2.14 does not properly escape untrusted parameters, enabling cross-site scripting (XSS) and potentially SQL injection via multiple input points. Affected areas include reports.cgi (product/output form variables), showvotes.cgi (voteon, bug_id, user), createaccount.cgi (email), sho...
CVE-2002-0932
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations 1 detailticket, 2 editticket, or 3 updateticketlog...
CVE-2002-0883
The CVE-2002-0883 entry describes a vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10. Authenticated users with Telnet, SSH, or console access can perform unauthorized activities, with full impact on confidentiality, integrity, and availability per CVSS v2. No expl...
CVE-2002-1086
Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized activities...
CVE-2002-0883: Undefined Security Weakness
Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities...
CVE-2002-1086: Undefined Security Weakness
Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized activities...
CVE-2002-0725
NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file...
CVE-2002-0340
CVE-2002-0340 concerns Windows Media Player (WMP) 8.00.00.4477 and potentially other versions, where the player can automatically detect and execute .wmf and similar content even if the file extension or content type does not indicate .wmf. This behavior could enable attackers to trigger unauthor...
CVE-2001-0648
CVE-2001-0648 describes a directory traversal vulnerability in PHProjekt 2.1 and earlier. A remote attacker can perform a dot-dot (..) attack on the file module to conduct unauthorized activities. The NVD entry lists a base score of 5.0 (Medium) with network access, low attack complexity, no auth...