2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

CVE IDSeverityCVSSDescription
CVE-2002-1884——index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to "a...
CVE-2002-2176——SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the user_level...
CVE-2002-2316——Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a singl...
CVE-2002-2386——Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, ...
CVE-2002-1885——PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 through 2.2.2 allows remote...
CVE-2002-1886——TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote att...
CVE-2002-2177——BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same r...
CVE-2002-1887——PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute a...
CVE-2002-1888——CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web ...
CVE-2002-2178——Cross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute a...
CVE-2002-2317——Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denia...
CVE-2002-1889——Off-by-one buffer overflow in the context_action function in context.c of Logsurfer 1.41 through 1.5a allows remote atta...
CVE-2002-1890——rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file.
CVE-2002-2179——The dynamic initialization feature of the ClearPath MCP environment allows remote attackers to cause a denial of service...
CVE-2002-1891——Buffer overflow in IRCIT 0.3.1 IRC client allows remote attackers to execute arbitrary code via a long invite request.
CVE-2002-1892——NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configura...
CVE-2002-2180——The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local us...
CVE-2002-2318——Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to i...
CVE-2002-2387——Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. ...
CVE-2002-2421——acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name suc...
CVE-2002-1893——Cross-site scripting (XSS) vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrary...
CVE-2002-1894——Cross-site scripting (XSS) vulnerability in viewtopic.php in phpBB 2.0.3 allows remote attackers to inject arbitrary web...
CVE-2002-2181——SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address ...
CVE-2002-1895——The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attack...
CVE-2002-1896——Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a lo...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now