Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
May

CVEs published in May 2002

188 vulnerabilities, 10 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

sgi irix/dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644...CVE-2002-01722.1 LowMay 16, 2002
sgi irisconsoleIRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in...CVE-2002-01717.5 HighMay 16, 2002
eazel nautilusNautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack...CVE-2002-01574.6 MediumMay 16, 2002
ecometry sgdynamoCross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to...CVE-2002-0375Public exploit5.0 MediumMay 9, 2002
apache http serverThe ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an...CVE-2002-1592Fix availableEPSS 12.5%5.0 MediumMay 6, 2002
mozilla, netscape navigator +1 moreThe XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to...CVE-2002-03545.0 MediumMay 3, 2002
ethereal group etherealThe ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of...CVE-2002-03535.0 MediumMay 3, 2002
phorumPhorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users...CVE-2002-03525.0 MediumMay 3, 2002
matt blaze cfsBuffer overflows in CFS daemon (cfsd) before 1.3.3-8.1, and 1.4x before 1.4.1-5, allow remote...CVE-2002-03517.5 HighMay 3, 2002
hp procurve switch 4000mHP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a...CVE-2002-03507.8 HighMay 3, 2002
tiny software personal firewallTiny Personal Firewall (TPF) 2.0.15, under certain configurations, will pop up an alert to the...CVE-2002-03494.6 MediumMay 3, 2002
sun cobalt raq 4, cobalt raq 2, cobalt raq 3i +2 moreservice.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly...CVE-2002-0348Public exploit7.5 HighMay 3, 2002
sun cobalt raq 4, cobalt raq 2, cobalt raq 3i +2 moreDirectory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password...CVE-2002-0347Public exploit5.0 MediumMay 3, 2002
sun cobalt raq 4, cobalt raq 2, cobalt raq 3i +2 moreCross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary...CVE-2002-0346Public exploit7.5 HighMay 3, 2002
symantec norton ghostSymantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry...CVE-2002-03457.5 HighMay 3, 2002
symantec liveupdateSymantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a...CVE-2002-03445.0 MediumMay 3, 2002
hotline communications connectHotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the...CVE-2002-03434.6 MediumMay 3, 2002
kde k-mailKmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email...CVE-2002-03425.0 MediumMay 3, 2002
novell groupwiseGWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to...CVE-2002-03415.0 MediumMay 3, 2002
microsoft windows media playerWindows Media Player (WMP) 8.00.00.4477, and possibly other versions, automatically detects and...CVE-2002-03407.5 HighMay 3, 2002
ritlabs the batThe Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a...CVE-2002-0338Public exploit5.0 MediumMay 3, 2002
realnetworks realplayerRealPlayer 8 allows remote attackers to cause a denial of service (CPU utilization) via malformed...CVE-2002-03375.4 MediumMay 3, 2002
galacticomm technologies worldgroup, worldgroup lite personal server +1 moreBuffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to...CVE-2002-0336Public exploit7.5 HighMay 3, 2002
galacticomm technologies worldgroup, worldgroup lite personal server +1 moreBuffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to...CVE-2002-0335Public exploit10.0 HighMay 3, 2002
xtellxtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows local users to modify files via a...CVE-2002-03342.1 LowMay 3, 2002
xtellDirectory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7,...CVE-2002-0333Public exploit5.0 MediumMay 3, 2002
xtellBuffer overflows in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote...CVE-2002-0332Public exploit7.5 HighMay 3, 2002
alcatech gmbh bpm studio proDirectory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote...CVE-2002-0331Public exploit5.0 MediumMay 3, 2002
ikonboard.com ikonboardCross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute...CVE-2002-0328Public exploit7.5 HighMay 3, 2002
century software termBuffer overflow in Century Software TERM allows local users to gain root privileges via a long...CVE-2002-0327Public exploit7.2 HighMay 3, 2002
working resources inc. badblueCross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to...CVE-2002-03267.5 HighMay 3, 2002
working resources inc. badblueDirectory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read...CVE-2002-0325Public exploitEPSS 37.8%5.0 MediumMay 3, 2002
noah gray graymatterGreymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read...CVE-2002-03247.5 HighMay 3, 2002
nombas scriptease webservercomment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by...CVE-2002-03235.0 MediumMay 3, 2002
yahoo messengerYahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to...CVE-2002-03227.5 HighMay 3, 2002
yahoo messengerYahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and...CVE-2002-03215.0 MediumMay 3, 2002
yahoo messengerBuffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and...CVE-2002-03207.5 HighMay 3, 2002
powie pforumCross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote...CVE-2002-0319Public exploit7.5 HighMay 3, 2002
gatorGator ActiveX component (IEGator.dll) 3.0.6.1 allows remote web sites to install arbitrary...CVE-2002-03177.5 HighMay 3, 2002
xmb software forumCross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote...CVE-2002-0316Public exploit7.5 HighMay 3, 2002
fasttrack kazaa, grokster, music city networks morpheus +2 morefasttrack p2p, as used in (1) KaZaA, (2) grokster, and (3) morpheus allows remote attackers to...CVE-2002-03157.5 HighMay 3, 2002
fasttrack kazaa, grokster, music city networks morpheus +2 morefasttrack p2p, as used in (1) KaZaA before 1.5, (2) grokster, and (3) morpheus allows remote...CVE-2002-03145.0 MediumMay 3, 2002
essen essentia web serverDirectory traversal vulnerability in Essentia Web Server 2.1 allows remote attackers to read...CVE-2002-03125.0 MediumMay 3, 2002
caldera unixware, openunix +1 moreVulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote...CVE-2002-0311Public exploit10.0 HighMay 3, 2002
netwin webnewsNetwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that...CVE-2002-03107.5 HighMay 3, 2002
stefan holmberg admentoradmin.asp in AdMentor 2.11 allows remote attackers to bypass authentication and gain privileges...CVE-2002-030810.0 HighMay 3, 2002
avengers news system news systemDirectory traversal vulnerability in ans.pl in Avenger's News System (ANS) 2.11 and earlier...CVE-2002-03077.5 HighMay 3, 2002
avengers news system news systemans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to execute...CVE-2002-03067.5 HighMay 3, 2002
zero one tech p100sZero One Tech (ZOT) P100s print server does not properly disable the SNMP service or change the...CVE-2002-03055.0 MediumMay 3, 2002
summit computer networks lil http serverLil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the...CVE-2002-03045.0 MediumMay 3, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open