CVEs published in August 2002

302 vulnerabilities, 19 critical, 0 exploited.

• hp tru64, hp-ux +1 more Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users... CVE-2002-1608 4.6 MediumAugust 31, 2002
• hp tru64, hp-ux +1 more Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to... CVE-2002-1607 4.6 MediumAugust 31, 2002
• oracle reports, application server +1 more rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as... CVE-2002-1089 Public exploit 5.0 MediumAugust 31, 2002
• visualshapers ezcontents The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and... CVE-2002-1087 5.0 MediumAugust 31, 2002
• visualshapers ezcontents Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to... CVE-2002-1086 7.5 HighAugust 31, 2002
• visualshapers ezcontents Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote... CVE-2002-1085 7.5 HighAugust 31, 2002
• visualshapers ezcontents The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution... CVE-2002-1084 6.4 MediumAugust 31, 2002
• visualshapers ezcontents Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to... CVE-2002-1083 5.0 MediumAugust 31, 2002
• visualshapers ezcontents The Image Upload capability for ezContents 1.40 and earlier allows remote attackers to cause... CVE-2002-1082 5.0 MediumAugust 31, 2002
• aprelium technologies abyss web server The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to... CVE-2002-1080 7.5 HighAugust 31, 2002
• aprelium technologies abyss web server Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request... CVE-2002-1078 5.0 MediumAugust 31, 2002
• ipswitch imail IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of... CVE-2002-1077 Public exploit EPSS 10.7% 5.0 MediumAugust 31, 2002
• david harris pegasus mail Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial... CVE-2002-1075 Public exploit 7.5 HighAugust 31, 2002
• atrium software mercur mailserver Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to... CVE-2002-1073 Public exploit 7.5 HighAugust 31, 2002
• zyxel prestige ZyXEL Prestige 642R 2.50(FA.1) and Prestige 310 V3.25(M.01), allows remote attackers to cause a... CVE-2002-1072 Public exploit 5.0 MediumAugust 31, 2002
• zyxel prestige ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and... CVE-2002-1071 Public exploit 5.0 MediumAugust 31, 2002
• php-wiki Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to... CVE-2002-1070 Public exploit 7.5 HighAugust 31, 2002
• d-link di-804 The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to... CVE-2002-1069 5.0 MediumAugust 31, 2002
• d-link dp-303 The web server for D-Link DP-300 print server allows remote attackers to cause a denial of... CVE-2002-1068 5.0 MediumAugust 31, 2002
• seh ic9 pocket print server firmware Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows... CVE-2002-1067 5.0 MediumAugust 31, 2002
• t. hauck jana web server Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service... CVE-2002-1066 7.5 HighAugust 31, 2002
• t. hauck jana web server Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number... CVE-2002-1065 7.5 HighAugust 31, 2002
• t. hauck jana web server Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses... CVE-2002-1064 5.0 MediumAugust 31, 2002
• t. hauck jana web server Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to... CVE-2002-1063 5.0 MediumAugust 31, 2002
• t. hauck jana web server Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows... CVE-2002-1062 7.5 HighAugust 31, 2002
• t. hauck jana web server Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier,... CVE-2002-1061 7.5 HighAugust 31, 2002
• cobalt qube Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and... CVE-2002-1058 Public exploit 10.0 HighAugust 31, 2002
• brother nc-3100h Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers... CVE-2002-1055 5.0 MediumAugust 31, 2002
• w3c jigsaw Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP... CVE-2002-1052 5.0 MediumAugust 31, 2002
• hp jetdirect HP JetDirect printers allow remote attackers to obtain the administrative password for the (1)... CVE-2002-1048 Public exploit EPSS 13.5% 7.5 HighAugust 31, 2002
• watchguard soho firewall The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges... CVE-2002-1047 7.5 HighAugust 31, 2002
• ultrafunk popcorn Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a... CVE-2002-1045 5.0 MediumAugust 31, 2002
• ultrafunk popcorn Buffer overflow in Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service ... CVE-2002-1044 7.5 HighAugust 31, 2002
• ultrafunk popcorn Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a... CVE-2002-1043 Public exploit 5.0 MediumAugust 31, 2002
• netscape enterprise server, sun iplanet web server, one application server +1 more +3 more Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9,... CVE-2002-1042 Public exploit 5.0 MediumAugust 31, 2002
• ibm aix Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to... CVE-2002-1041 5.0 MediumAugust 31, 2002
• ibm aix Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly... CVE-2002-1040 5.0 MediumAugust 31, 2002
• michael dean double choco latte Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which... CVE-2002-1038 5.0 MediumAugust 31, 2002
• michael dean double choco latte Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote... CVE-2002-1037 5.0 MediumAugust 31, 2002
• zoltan milosevic fluid dynamics search engine Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2... CVE-2002-1036 Public exploit 7.5 HighAugust 31, 2002
• sun i-runbook none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute... CVE-2002-1034 Public exploit 10.0 HighAugust 31, 2002
• sun i-runbook Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to... CVE-2002-1033 Public exploit 5.0 MediumAugust 31, 2002
• key focus kf web server Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a... CVE-2002-1032 7.5 HighAugust 31, 2002
• worldspan res manager Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of... CVE-2002-1029 Public exploit 5.0 MediumAugust 31, 2002
• oddsock song requester Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow... CVE-2002-1028 Public exploit 5.0 MediumAugust 31, 2002
• macromedia sitespring Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for... CVE-2002-1027 Public exploit 7.5 HighAugust 31, 2002
• macromedia sitespring Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote... CVE-2002-1026 5.0 MediumAugust 31, 2002
• working resources inc. badblue BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET... CVE-2002-1023 Public exploit 5.0 MediumAugust 31, 2002
• working resources inc. badblue BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and... CVE-2002-1022 7.5 HighAugust 31, 2002
• working resources inc. badblue BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP... CVE-2002-1021 Public exploit 5.0 MediumAugust 31, 2002
• Show olderLoading…