Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
May

CVEs published in May 2002

188 vulnerabilities, 10 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

novell groupwiseGroupWise 6, when using LDAP authentication and when Post Office has a blank username and...CVE-2002-03034.6 MediumMay 3, 2002
citrix nfuseCitrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive...CVE-2002-03015.0 MediumMay 3, 2002
nombas scriptease webserverScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via...CVE-2002-02985.0 MediumMay 3, 2002
nombas scriptease webserverBuffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of...CVE-2002-02975.0 MediumMay 3, 2002
tarantella enterpriseThe installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a...CVE-2002-0296Public exploit1.2 LowMay 3, 2002
alcatel-lucent omnipcxAlcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to...CVE-2002-02954.6 MediumMay 3, 2002
alcatel-lucent omnipcxAlcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many...CVE-2002-02942.1 LowMay 3, 2002
alcatel-lucent omnipcxFTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying...CVE-2002-02936.2 MediumMay 3, 2002
funsoft dinos webserverDino's Webserver 1.2 allows remote attackers to cause a denial of service (CPU consumption) and...CVE-2002-02915.0 MediumMay 3, 2002
bbshareware.com phusion webserverBuffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service...CVE-2002-0289Public exploitEPSS 13.0%5.0 MediumMay 3, 2002
bbshareware.com phusion webserverDirectory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read...CVE-2002-0288Public exploit5.0 MediumMay 3, 2002
sitenewsThe GetPassword function in function.php of SiteNews 0.10 and 0.11 allows remote attackers to...CVE-2002-02867.5 HighMay 3, 2002
microsoft outlook expressOutlook Express 5.5 and 6.0 on Windows treats a carriage return ("CR") in a message header as if...CVE-2002-0285EPSS 12.3%7.5 HighMay 3, 2002
nullsoft winampWinamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the...CVE-2002-02842.6 LowMay 3, 2002
microsoft windows xpWindows XP with port 445 open allows remote attackers to cause a denial of service (CPU...CVE-2002-0283EPSS 28.4%5.0 MediumMay 3, 2002
codeworx technologies dcp-portalDCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via ...CVE-2002-02825.0 MediumMay 3, 2002
codeworx technologies dcp-portalCross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain...CVE-2002-02815.1 MediumMay 3, 2002
codeblueBuffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers...CVE-2002-0280Public exploit7.5 HighMay 3, 2002
hp hp-uxThe kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow...CVE-2002-02794.6 MediumMay 3, 2002
add2it mailman freeDirectory traversal vulnerability in Add2it Mailman Free 1.73 and earlier allows remote attackers...CVE-2002-02787.5 HighMay 3, 2002
add2it mailman freeAdd2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via...CVE-2002-02777.5 HighMay 3, 2002
netwin cwmailBuffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute...CVE-2002-02734.6 MediumMay 3, 2002
mpg321Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute...CVE-2002-027210.0 HighMay 3, 2002
ada core technologies gnat pro nativeRuntime library in GNU Ada compiler (GNAT) 3.12p through 3.14p allows local users to modify files...CVE-2002-02711.2 LowMay 3, 2002
opera software web browserOpera, when configured with the "Determine action by MIME type" option disabled, interprets an...CVE-2002-02704.3 MediumMay 3, 2002
microsoft internet explorerInternet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content...CVE-2002-0269EPSS 11.5%7.5 HighMay 3, 2002
identix biologonIdentix BioLogon 3 allows users with physical access to the system to gain administrative...CVE-2002-02687.2 HighMay 3, 2002
thunderstone software texisThunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via...CVE-2002-0266Public exploit5.0 MediumMay 3, 2002
cooolsoft powerftpPowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext...CVE-2002-02647.5 HighMay 3, 2002
ezne.net ezboard 2000Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows remote attackers to execute arbitrary...CVE-2002-0263Public exploitEPSS 13.0%7.5 HighMay 3, 2002
sybex e-trainerDirectory traversal vulnerability in netget for Sybex E-Trainer web server allows remote...CVE-2002-02625.0 MediumMay 3, 2002
instantservers inc. miniportalDirectory traversal vulnerability in InstantServers MiniPortal 1.1.5 and earlier allows remote...CVE-2002-02617.5 HighMay 3, 2002
instantservers inc. miniportalBuffer overflow in InstantServers MiniPortal 1.1.5 and earlier allows remote attackers to execute...CVE-2002-02607.5 HighMay 3, 2002
instantservers inc. miniportalInstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext...CVE-2002-02594.6 MediumMay 3, 2002
icewarp web mail, merak mail server +1 moreMerak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change...CVE-2002-02587.5 HighMay 3, 2002
usanet creations makebid auction deluxe, apache http server +1 moreCross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote...CVE-2002-02577.5 HighMay 3, 2002
arescom netdslThe telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of...CVE-2002-0256Public exploit5.0 MediumMay 3, 2002
arescom netdslThe default configuration of Arescom NetDSL 800 does not require authentication, which allows...CVE-2002-025510.0 HighMay 3, 2002
mirabilis icqICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed...CVE-2002-02545.0 MediumMay 3, 2002
phpPHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote...CVE-2002-02535.0 MediumMay 3, 2002
apple quicktimeBuffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute...CVE-2002-0252Public exploitEPSS 10.5%7.5 HighMay 3, 2002
apache http serverPHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote...CVE-2002-02495.0 MediumMay 3, 2002
wliang wmtvwmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a...CVE-2002-02487.2 HighMay 3, 2002
wliang wmtvBuffer overflows in wmtv 0.6.5 and earlier may allow local users to gain privileges.CVE-2002-02477.2 HighMay 3, 2002
lotus dominoLotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the...CVE-2002-02457.5 HighMay 3, 2002
atheosDirectory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape...CVE-2002-0244Public exploit7.5 HighMay 3, 2002
opera software web browserCross-site scripting vulnerability in Opera 6.0 and earlier allows remote attackers to execute...CVE-2002-02437.5 HighMay 3, 2002
microsoft internet explorerCross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to...CVE-2002-0242EPSS 11.4%7.5 HighMay 3, 2002
apache http serverPHP, when installed with Apache and configured to search for index.php as a default web page,...CVE-2002-02405.0 MediumMay 3, 2002
hantermBuffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a...CVE-2002-0239Public exploit7.2 HighMay 3, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open