CVEs published in July 2002

147 vulnerabilities, 24 critical, 0 exploited.

• ibm u2 universe IBM UniVerse with UV/ODBC allows attackers to cause a denial of service (client crash or server... CVE-2002-1450 5.0 MediumJuly 31, 2002
• frederic tyndiuk eupload eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which... CVE-2002-1449 7.5 HighJuly 31, 2002
• mozilla bugzilla Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a... CVE-2002-0811 7.5 HighJuly 31, 2002
• mozilla bugzilla Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2,... CVE-2002-0807 7.5 HighJuly 31, 2002
• mozilla bugzilla Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display... CVE-2002-0803 5.0 MediumJuly 31, 2002
• gnu glibc, isc bind +1 more Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as... CVE-2002-0684 Fix available 7.5 HighJuly 31, 2002
• openssl, apple mac os x, oracle application server +2 more +4 more The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote... CVE-2002-0659 Public exploitFix available EPSS 36.2% 5.0 MediumJuly 30, 2002
• ossp mm OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via... CVE-2002-0658 Public exploitFix available 6.2 MediumJuly 30, 2002
• openssl Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to... CVE-2002-0657 Fix available 7.5 HighJuly 30, 2002
• openssl, apple mac os x, oracle application server +2 more +4 more Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote... CVE-2002-0656 Public exploitFix available EPSS 89.8% 7.5 HighJuly 30, 2002
• openssl, apple mac os x, oracle application server +2 more +4 more OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII... CVE-2002-0655 Fix available 7.5 HighJuly 30, 2002
• working resources inc. badblue BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an... CVE-2002-0800 5.0 MediumJuly 26, 2002
• youngzsoft cmailserver Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code... CVE-2002-0799 Public exploit EPSS 13.9% 7.5 HighJuly 26, 2002
• hp hp-ux Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views... CVE-2002-0798 2.1 LowJuly 26, 2002
• sun solaris, sunos +1 more Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote... CVE-2002-0797 10.0 HighJuly 26, 2002
• sun solaris, sunos +1 more Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows... CVE-2002-0796 10.0 HighJuly 26, 2002
• blackberry qnx neutrino real-time operating system Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow... CVE-2002-0793 Public exploit 5.5 MediumJuly 26, 2002
• cisco content services switch 11000, webns +1 more The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote... CVE-2002-0792 5.0 MediumJuly 26, 2002
• novell netware Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of... CVE-2002-0791 5.0 MediumJuly 26, 2002
• critical path injoin directory server Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin... CVE-2002-0787 Public exploit 7.5 HighJuly 26, 2002
• critical path injoin directory server iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated... CVE-2002-0786 Public exploit 5.0 MediumJuly 26, 2002
• lysias lidik webserver Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list... CVE-2002-0784 5.0 MediumJuly 26, 2002
• opera software web browser Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security... CVE-2002-0783 Public exploit 7.5 HighJuly 26, 2002
• novell bordermanager Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to... CVE-2002-0782 5.0 MediumJuly 26, 2002
• novell bordermanager RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of... CVE-2002-0781 5.0 MediumJuly 26, 2002
• novell bordermanager IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of... CVE-2002-0780 5.0 MediumJuly 26, 2002
• novell bordermanager FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of... CVE-2002-0779 5.0 MediumJuly 26, 2002
• hosting controller controller browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by... CVE-2002-0775 Public exploit 5.0 MediumJuly 26, 2002
• hosting controller controller Hosting Controller creates a default user AdvWebadmin with a default password, which could allow... CVE-2002-0774 10.0 HighJuly 26, 2002
• hosting controller controller imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files... CVE-2002-0773 Public exploit 10.0 HighJuly 26, 2002
• hosting controller controller Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote... CVE-2002-0772 Public exploit 6.4 MediumJuly 26, 2002
• viewcvs Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to... CVE-2002-0771 Public exploit 6.4 MediumJuly 26, 2002
• id software quake 2i server Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar... CVE-2002-0770 Public exploit 5.0 MediumJuly 26, 2002
• cisco ata-186 The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows... CVE-2002-0769 Public exploit 6.4 MediumJuly 26, 2002
• richard gooch simpleinit simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a... CVE-2002-0767 Public exploit 7.2 HighJuly 26, 2002
• phorum Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1)... CVE-2002-0764 Public exploit EPSS 38.3% 7.5 HighJuly 26, 2002
• hp virtualvault Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web... CVE-2002-0763 7.5 HighJuly 26, 2002
• usermin, webmin +1 more (1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly... CVE-2002-0757 7.5 HighJuly 26, 2002
• usermin, webmin +1 more Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin... CVE-2002-0756 7.5 HighJuly 26, 2002
• talentsoft web\+ server Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an... CVE-2002-0753 10.0 HighJuly 26, 2002
• cgiscript.net csmailto CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web... CVE-2002-0752 5.0 MediumJuly 26, 2002
• cgiscript.net csmailto CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and... CVE-2002-0751 7.5 HighJuly 26, 2002
• cgiscript.net csmailto CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying... CVE-2002-0750 5.0 MediumJuly 26, 2002
• cgiscript.net csmailto CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell... CVE-2002-0749 Public exploit EPSS 11.0% 7.5 HighJuly 26, 2002
• ibm aix Buffer overflow in lsmcode in AIX 4.3.3. CVE-2002-0747 Public exploit 10.0 HighJuly 26, 2002
• ibm aix Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument. CVE-2002-0746 10.0 HighJuly 26, 2002
• ibm aix Buffer overflow in uucp in AIX 4.3.3. CVE-2002-0745 10.0 HighJuly 26, 2002
• ibm aix namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a... CVE-2002-0744 10.0 HighJuly 26, 2002
• ibm aix mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a... CVE-2002-0743 10.0 HighJuly 26, 2002
• ibm aix Buffer overflow in pioout on AIX 4.3.3. CVE-2002-0742 10.0 HighJuly 26, 2002
• Show olderLoading…