Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2002
June

CVEs published in June 2002

184 vulnerabilities, 21 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

steve korbett pvotePVote before 1.9 allows remote attackers to change the administrative password and gain...CVE-2002-0589Public exploit7.5 HighJune 11, 2002
steve korbett pvotePVote before 1.9 does not authenticate users for restricted operations, which allows remote...CVE-2002-0588Public exploit5.0 MediumJune 11, 2002
aol serverBuffer overflow in Ns_PdLog function for the external database driver proxy daemon library ...CVE-2002-05877.5 HighJune 11, 2002
aol serverFormat string vulnerability in Ns_PdLog function for the external database driver proxy daemon...CVE-2002-05867.5 HighJune 11, 2002
hp hp-uxUnknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to...CVE-2002-05855.0 MediumJune 11, 2002
workforceroi xpedeWorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID...CVE-2002-05845.0 MediumJune 11, 2002
workforceroi xpedeWorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary...CVE-2002-05835.0 MediumJune 11, 2002
workforceroi xpedeWorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable ...CVE-2002-05825.0 MediumJune 11, 2002
workforceroi xpedeWorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify...CVE-2002-05817.5 HighJune 11, 2002
workforceroi xpedeWorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to...CVE-2002-05807.5 HighJune 11, 2002
workforceroi xpedeWorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a...CVE-2002-05797.5 HighJune 11, 2002
aci 4d webserverBuffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and...CVE-2002-05787.5 HighJune 11, 2002
hp hp-uxVulnerability in passwd for HP-UX 11.00 and 11.11 allows local users to corrupt the password file...CVE-2002-05772.1 LowJune 11, 2002
freebsd, openbsd, sun solaris +1 more +3 moreFreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to...CVE-2002-0572Public exploit7.2 HighJune 11, 2002
linux kernelThe encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity...CVE-2002-05702.1 LowJune 11, 2002
oracle application server, oracle8i, oracle9i +2 moreOracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows...CVE-2002-0568EPSS 75.2%2.1 LowJune 11, 2002
oracle application server, application server web cache, oracle8i +1 more +3 morePL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause...CVE-2002-05665.0 MediumJune 11, 2002
oracle application server, application server web cache, oracle9i +2 moreOracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions...CVE-2002-05655.0 MediumJune 11, 2002
oracle application server, application server web cache, oracle8i +1 more +3 morePL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass...CVE-2002-05647.5 HighJune 11, 2002
oracle application server, application server web cache, oracle8i +1 more +3 moreThe default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users...CVE-2002-0563EPSS 51.1%5.0 MediumJune 11, 2002
oracle application server, application server web cache, oracle9i +2 moreThe default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP...CVE-2002-05625.0 MediumJune 11, 2002
oracle application server, application server web cache, oracle8i +1 more +3 moreThe default configuration of the PL/SQL Gateway web administration interface in Oracle 9i...CVE-2002-05617.5 HighJune 11, 2002
oracle application server, application server web cache, oracle8i +1 more +3 morePL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain...CVE-2002-05605.0 MediumJune 11, 2002
oracle application server, application server web cache, oracle8i +1 more +3 moreBuffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote...CVE-2002-0559EPSS 13.1%7.5 HighJune 11, 2002
typsoft ftp serverDirectory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote...CVE-2002-05585.0 MediumJune 11, 2002
openbsdVulnerability in OpenBSD 3.0, when using YP with netgroups in the password database, causes (1)...CVE-2002-05577.5 HighJune 11, 2002
deep forest software quik-serv webserverDirectory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read...CVE-2002-05565.0 MediumJune 11, 2002
ibm informix web databladeIBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which...CVE-2002-05557.5 HighJune 11, 2002
ibm informix web databladewebdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels...CVE-2002-0554Public exploit7.5 HighJune 11, 2002
melange chat systemMultiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a...CVE-2002-0552Public exploit7.5 HighJune 11, 2002
gcf dynamic guestbookCross-site scripting vulnerability in Dynamic Guestbook 3.0 allows remote attackers to execute...CVE-2002-05517.5 HighJune 11, 2002
gcf dynamic guestbookDynamic Guestbook 3.0 allows remote attackers to execute arbitrary code via shell metacharacters...CVE-2002-05507.5 HighJune 11, 2002
anthillCross-site scripting vulnerabilities in Anthill allow remote attackers to execute script as other...CVE-2002-05497.5 HighJune 11, 2002
anthillAnthill allows remote attackers to bypass authentication and file bug reports by directly...CVE-2002-05487.5 HighJune 11, 2002
nullsoft winampBuffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause...CVE-2002-05477.5 HighJune 11, 2002
aprelium technologies abyss web serverAprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in...CVE-2002-0544Public exploit7.2 HighJune 11, 2002
ibm tivoli storage managerBuffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and ...CVE-2002-05417.5 HighJune 11, 2002
nortel cvx 1800 multi-service access switchNortel CVX 1800 is installed with a default "public" community string, which allows remote...CVE-2002-0540Public exploitEPSS 19.9%7.5 HighJune 11, 2002
stepweb swsThe admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl,...CVE-2002-053710.0 HighJune 11, 2002
postboard, postnuke software foundation postnuke +1 moreCross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to...CVE-2002-0535Public exploit5.0 MediumJune 11, 2002
postboardPostBoard 2.0.1 and earlier with BBcode allows remote attackers to cause a denial of service (CPU...CVE-2002-05345.0 MediumJune 11, 2002
phpbb group phpbbphpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU...CVE-2002-05335.0 MediumJune 11, 2002
novell web searchCross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute...CVE-2002-05305.1 MediumJune 11, 2002
hp photosmart print driverHP Photosmart printer driver for Mac OS X installs the hp_imaging_connectivity program and the...CVE-2002-05296.2 MediumJune 11, 2002
watchguard soho firewallWatchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized...CVE-2002-052810.0 HighJune 11, 2002
watchguard soho firewallWatchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service ...CVE-2002-05275.0 MediumJune 11, 2002
innVulnerability in (1) inews or (2) rnews for INN 2.2.3 and earlier, related to insecure open() calls.CVE-2002-05267.2 HighJune 11, 2002
isc innFormat string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local...CVE-2002-0525Public exploit10.0 HighJune 11, 2002
asp-nukeASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by ...CVE-2002-05245.0 MediumJune 11, 2002
asp-nukeASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an...CVE-2002-05235.0 MediumJune 11, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open