CVEs published January 10, 2002
2 CVEs were published on January 10, 2002: 0 critical, 0 high.
- Published
- 2
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 2
- CVE-2002-0008Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter,
- CVE-2002-0010Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via (1) the sql parameter in