# CVEs published 2002-11-21

8 CVEs were published on November 21, 2002: 0 critical, 0 high. Days are UTC.

- [CVE-2002-0029](https://cve.now/CVE-2002-0029.md): Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU gli (no CVSS)
- [CVE-2002-1204](https://cve.now/CVE-2002-1204.md): Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as (no CVSS)
- [CVE-2002-1210](https://cve.now/CVE-2002-1210.md): Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows remote attackers to (no CVSS)
- [CVE-2002-1306](https://cve.now/CVE-2002-1306.md): Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to e (no CVSS)
- [CVE-2002-1309](https://cve.now/CVE-2002-1309.md): Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to (no CVSS)
- [CVE-2002-1310](https://cve.now/CVE-2002-1310.md): Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attack (no CVSS)
- [CVE-2002-1315](https://cve.now/CVE-2002-1315.md): Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web s (no CVSS)
- [CVE-2002-1316](https://cve.now/CVE-2002-1316.md): importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell m (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-11-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.