Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
June

CVEs published in June 2002

184 vulnerabilities, 21 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

asp-nukeASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by...CVE-2002-05227.5 HighJune 11, 2002
asp-nukeCross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to...CVE-2002-05215.1 MediumJune 11, 2002
asp-nukeCross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers...CVE-2002-05207.5 HighJune 11, 2002
freebsdThe SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows...CVE-2002-05185.0 MediumJune 11, 2002
caldera unixware, openunix +1 moreBuffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly...CVE-2002-05177.2 HighJune 11, 2002
phildev ipfilterIPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is...CVE-2002-05155.0 MediumJune 11, 2002
openbsdPF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows...CVE-2002-05145.0 MediumJune 11, 2002
linux kernelThe UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non...CVE-2002-05105.0 MediumJune 11, 2002
oracle oracle9iTransparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to...CVE-2002-05095.0 MediumJune 11, 2002
wwwisiswwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via...CVE-2002-050810.0 HighJune 11, 2002
rsa securid, microsoft exchange server +1 moreAn interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to...CVE-2002-05072.1 LowJune 11, 2002
citrix nfuseCross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from...CVE-2002-0504Public exploit7.5 HighJune 11, 2002
citrix nfuseDirectory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote...CVE-2002-05035.0 MediumJune 11, 2002
citrix nfuseCitrix NFuse 1.6 may allow remote attackers to list applications without authentication by...CVE-2002-0502Public exploit5.0 MediumJune 11, 2002
microsoft internet explorerInternet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on...CVE-2002-0500EPSS 16.2%5.0 MediumJune 11, 2002
linux kernelThe d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long...CVE-2002-0499Public exploit2.1 LowJune 11, 2002
etnus totalviewEtnus TotalView 5.0.0-4 installs certain files with UID 5039 and GID 59, which could allow local...CVE-2002-04984.6 MediumJune 11, 2002
southwestThe HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of...CVE-2002-04965.0 MediumJune 11, 2002
dcscripts dcshopdcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a...CVE-2002-0492Public exploit5.0 MediumJune 11, 2002
alguestadmin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate...CVE-2002-049110.0 HighJune 11, 2002
linux directory penguin nslookupLinux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute...CVE-2002-048910.0 HighJune 11, 2002
workforceroi xpedeIntellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re...CVE-2002-04874.6 MediumJune 11, 2002
workforceroi xpedeIntellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which...CVE-2002-0486Public exploit7.2 HighJune 11, 2002
symantec norton antivirusNorton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose...CVE-2002-04857.5 HighJune 11, 2002
francisco burzi php-nukeindex.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname...CVE-2002-0483Public exploit5.0 MediumJune 11, 2002
newlog netsupport managerDirectory traversal vulnerability in PCI Netsupport Manager before version 7, when running web...CVE-2002-04825.0 MediumJune 11, 2002
microsoft outlookAn interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to...CVE-2002-0481EPSS 10.1%5.1 MediumJune 11, 2002
iss realsecure nokiaISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user ...CVE-2002-048010.0 HighJune 11, 2002
gravity storm software service pack manager 2000Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive,...CVE-2002-04797.2 HighJune 11, 2002
foundrynet edgeironThe default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify...CVE-2002-04785.0 MediumJune 11, 2002
macromedia flash playerStandalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute...CVE-2002-04777.5 HighJune 11, 2002
macromedia flash playerStandalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and...CVE-2002-04765.0 MediumJune 11, 2002
phpbb group phpbbCross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute...CVE-2002-04755.1 MediumJune 11, 2002
zeroforumCross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary...CVE-2002-04745.1 MediumJune 11, 2002
microsoft msn messengerMSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging...CVE-2002-0472EPSS 11.9%5.0 MediumJune 11, 2002
phpnettoolpackPHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in...CVE-2002-047110.0 HighJune 11, 2002
phpnettoolpackPHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program,...CVE-2002-04707.2 HighJune 11, 2002
ecartis, listar +1 moreEcartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop...CVE-2002-04697.2 HighJune 11, 2002
ecartis, listar +1 moreBuffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local...CVE-2002-0468Public exploit4.6 MediumJune 11, 2002
ecartis, listar +1 moreBuffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote...CVE-2002-046710.0 HighJune 11, 2002
hosting controller controllerHosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via...CVE-2002-04665.0 MediumJune 11, 2002
hosting controller controllerDirectory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier...CVE-2002-046510.0 HighJune 11, 2002
microsoft internet explorerInternet Explorer 5.01 through 6 allows remote attackers to cause a denial of service ...CVE-2002-0461Public exploitEPSS 24.0%5.0 MediumJune 11, 2002
bitvise winsshdBitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource...CVE-2002-04605.0 MediumJune 11, 2002
linux-sottises board-tnk, news-tnk +1 moreCross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to...CVE-2002-04597.6 HighJune 11, 2002
linux-sottises news-tnkCross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to...CVE-2002-04587.6 HighJune 11, 2002
bg guestbook guestbookCross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers...CVE-2002-04577.6 HighJune 11, 2002
qualcomm eudoraEudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could...CVE-2002-04565.0 MediumJune 11, 2002
incredimailIncrediMail stores attachments in a directory with a fixed name, which could make it easier for...CVE-2002-04555.0 MediumJune 11, 2002
oblix netpointThe account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for...CVE-2002-04537.5 HighJune 11, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open