# CVEs published 2002-11-14

17 CVEs were published on November 14, 2002: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1247](https://cve.now/CVE-2002-1247.md): Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon. (no CVSS)
- [CVE-2002-1276](https://cve.now/CVE-2002-1276.md): An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip\_tags function on the PHP\_SELF value b (no CVSS)
- [CVE-2002-1279](https://cve.now/CVE-2002-1279.md): Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via cert (no CVSS)
- [CVE-2002-1281](https://cve.now/CVE-2002-1281.md): Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local an (no CVSS)
- [CVE-2002-1282](https://cve.now/CVE-2002-1282.md): Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute ar (no CVSS)
- [CVE-2002-1283](https://cve.now/CVE-2002-1283.md): Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an authentication request w (no CVSS)
- [CVE-2002-1285](https://cve.now/CVE-2002-1285.md): runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments. (no CVSS)
- [CVE-2002-1286](https://cve.now/CVE-2002-1286.md): The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different (no CVSS)
- [CVE-2002-1287](https://cve.now/CVE-2002-1287.md): Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of (no CVSS)
- [CVE-2002-1288](https://cve.now/CVE-2002-1288.md): The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet (no CVSS)
- [CVE-2002-1289](https://cve.now/CVE-2002-1289.md): The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial o (no CVSS)
- [CVE-2002-1290](https://cve.now/CVE-2002-1290.md): The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard vi (no CVSS)
- [CVE-2002-1291](https://cve.now/CVE-2002-1291.md): The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares vi (no CVSS)
- [CVE-2002-1292](https://cve.now/CVE-2002-1292.md): The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Stan (no CVSS)
- [CVE-2002-1293](https://cve.now/CVE-2002-1293.md): The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader (no CVSS)
- [CVE-2002-1294](https://cve.now/CVE-2002-1294.md): The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Javascript, which allows (no CVSS)
- [CVE-2002-1295](https://cve.now/CVE-2002-1295.md): The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-11-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.