Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: November 2002

19 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2002-0386
    27Monitor

    The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of servi

    MediumCVSS 5.0Proof of conceptEPSS 21%

    oracle · application serverNov 4, 2002

  • CVE-2002-1157
    33Monitor

    Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled,

    HighCVSS 7.5No exploitEPSS 11%

    mod ssl · mod sslNov 4, 2002

  • CVE-2002-1209
    24Monitor

    Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files vi

    MediumCVSS 5.0Proof of conceptEPSS 12%

    solarwinds · tftp serverNov 4, 2002

  • CVE-2002-1235
    45Plan

    The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and ea

    CriticalCVSS 10.0No exploitEPSS 15%

    mit · kerberos 5Nov 4, 2002

  • CVE-2002-0869
    37Monitor

    Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote att

    HighCVSS 7.5No exploitEPSS 23%

    microsoft · internet information serverNov 12, 2002

  • CVE-2002-1181
    39Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 thro

    MediumCVSS 6.8No exploitEPSS 39%

    microsoft · internet information serverNov 12, 2002

  • CVE-2002-1182
    31Monitor

    IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV requests that cause a large amount of memo

    MediumCVSS 5.0No exploitEPSS 36%

    microsoft · internet information servicesNov 12, 2002

  • CVE-2002-1142
    53Plan

    Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Inter

    HighCVSS 7.5WeaponizedEPSS 76%

    microsoft · data access componentsNov 29, 2002

  • CVE-2002-1219
    34Monitor

    Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitra

    HighCVSS 7.5No exploitEPSS 12%

    isc · bindNov 29, 2002

  • CVE-2002-1286
    36Monitor

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different

    HighCVSS 7.5No exploitEPSS 20%

    microsoft · java virtual machineNov 29, 2002

  • CVE-2002-1287
    26Monitor

    Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of

    MediumCVSS 5.0No exploitEPSS 20%

    microsoft · java virtual machineNov 29, 2002

  • CVE-2002-1288
    25Monitor

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet

    MediumCVSS 5.0No exploitEPSS 17%

    microsoft · java virtual machineNov 29, 2002

  • CVE-2002-1289
    35Monitor

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial o

    HighCVSS 7.5No exploitEPSS 16%

    microsoft · java virtual machineNov 29, 2002

  • CVE-2002-1290
    29Monitor

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard vi

    MediumCVSS 6.4No exploitEPSS 14%

    microsoft · java virtual machineNov 29, 2002

  • CVE-2002-1291
    26Monitor

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares vi

    MediumCVSS 5.0No exploitEPSS 18%

    microsoft · java virtual machineNov 29, 2002

  • CVE-2002-1292
    37Monitor

    The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Stan

    HighCVSS 7.5No exploitEPSS 22%

    microsoft · java virtual machineNov 29, 2002

  • CVE-2002-1293
    35Monitor

    The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · java virtual machineNov 29, 2002

  • CVE-2002-1294
    34Monitor

    The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Javascript, which allows

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · java virtual machineNov 29, 2002

  • CVE-2002-1295
    35Monitor

    The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly c

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · java virtual machineNov 29, 2002