2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

CVE IDSeverityCVSSDescription
CVE-2002-1748Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to g...
CVE-2002-1747Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions with...
CVE-2002-1746Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets.
CVE-2002-1744Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and d...
CVE-2002-1743AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file.
CVE-2002-1742SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent functio...
CVE-2002-1741Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier a...
CVE-2002-1740Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users t...
CVE-2002-1738Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which ...
CVE-2002-1737Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrar...
CVE-2002-1736Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input."
CVE-2002-1735Buffer overflow in dlogin 1.0a could allow local users to gain privileges via unknown attack vectors.
CVE-2002-1734NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to...
CVE-2002-1733Cross-site scripting (XSS) vulnerability in the web-based message board in Prospero Technologies allows remote attackers...
CVE-2002-1732Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary ...
CVE-2002-1731The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that ar...
CVE-2002-1730ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative scrip...
CVE-2002-1729Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers to execute arbitrary script as...
CVE-2002-1728askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a requ...
CVE-2002-1727Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows re...
CVE-2002-1726secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, no...
CVE-2002-1725phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, whi...
CVE-2002-1724Cross-site scripting vulnerability (XSS) in phpimageview.php for PHPImageView 1.0 allows remote attackers to execute arb...
CVE-2002-1723Powerboards 2.2b allows remote attackers to view the full path to the backend database by sending a cookie containing a ...
CVE-2002-2377Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi di...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now