2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

CVE IDSeverityCVSSDescription
CVE-2002-1728askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a requ...
CVE-2002-1748Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to g...
CVE-2002-1762Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\user...
CVE-2002-1771Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline cha...
CVE-2002-1787Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary cod...
CVE-2002-2364Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web s...
CVE-2002-1747Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions with...
CVE-2002-1740Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users t...
CVE-2002-1739MEDIUM5.5Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows loca...
CVE-2002-1703Cross-site scripting vulnerability (XSS) in auction.cgi for Mewsoft NetAuction 3.0 allows remote attackers to execute ar...
CVE-2002-1741Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier a...
CVE-2002-1743AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file.
CVE-2002-1737Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrar...
CVE-2002-1676BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwords) by del...
CVE-2002-1738Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which ...
CVE-2002-1732Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary ...
CVE-2002-1691Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remot...
CVE-2002-1733Cross-site scripting (XSS) vulnerability in the web-based message board in Prospero Technologies allows remote attackers...
CVE-2002-1742SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent functio...
CVE-2002-1780BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service (cra...
CVE-2002-1727Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows re...
CVE-2002-1652Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service (crash) and possibly e...
CVE-2002-1729Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers to execute arbitrary script as...
CVE-2002-1726secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, no...
CVE-2002-1715SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by up...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now