Skip to content

November 2002 · Band 4

Possible (1 to 10%)

16 CVEs

Each square is a CVE that EPSS puts between 1% and 10%.

Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.

  1. Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute a…CVE-2002-0029Isc · 9.9% likely

    Isc

  2. Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."CVE-2002-1275Html2ps Project · 9.2% likely
  3. Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain packets to port 371, e.g. via nmap.CVE-2002-1322Rational Software · 7.2% likely
  4. Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / (slash) chara…CVE-2002-1238Peter Sandvik · 7.1% likely
  5. Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the "lisa" da…CVE-2002-1306Kde · 5.8% likely

    Kde

  6. Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary…CVE-2002-1281Kde · 5.2% likely

    Kde

  7. Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL.CVE-2002-1282Kde · 4.4% likely

    Kde

  8. Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SMIL) file with a long…CVE-2002-1321Realnetworks · 3.3% likely

    Realnetworks

  9. Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote attackers to cause a denial of service.CVE-2002-0711Hp · 2.7% likely

    HP

  10. Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GE…CVE-2002-1310Macromedia · 2.2% likely

    Macromedia

  11. importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and…CVE-2002-1316Iplanet · 2.0% likely

    Iplanet

  12. Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to execute arbitrary via an HTTP GET requ…CVE-2002-1309Macromedia · 2.0% likely

    Macromedia

  13. Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an authentication request with a long Distinguished Name (DN) attr…CVE-2002-1283Novell · 2.0% likely

    Novell

  14. Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administra…CVE-2002-1315Iplanet · 1.6% likely

    Iplanet

  15. An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on the PHP_SELF value but does not save the result back to tha…CVE-2002-1276Squirrelmail · 1.4% likely

    Squirrelmail

  16. Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possib…CVE-2002-1204Netscape · 1.3% likely

    Netscape

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.