2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

CVE IDSeverityCVSSDescription
CVE-2002-1477graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shel...
CVE-2002-1480Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script...
CVE-2002-1476Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with...
CVE-2002-1478Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.
CVE-2002-1473Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of ser...
CVE-2002-1469scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote...
CVE-2002-1474Unknown vulnerability or vulnerabilities in TCP/IP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attack...
CVE-2002-1468Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root.
CVE-2002-1467Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary...
CVE-2002-1470SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port...
CVE-2002-1471The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL co...
CVE-2002-1475Unknown vulnerability in the ARP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to "take over ...
CVE-2002-1479Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions...
CVE-2002-1464Cross-site scripting (XSS) vulnerability in CafeLog b2 Weblog Tool allows remote attackers to insert arbitrary HTML or s...
CVE-2002-1465SQL injection vulnerability in CafeLog b2 Weblog Tool allows remote attackers to execute arbitrary SQL code via the tabl...
CVE-2002-1481savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a den...
CVE-2002-1466CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PHP code via...
CVE-2002-1421SQL injection vulnerabilities in FUDforum before 2.2.0 allow remote attackers to perform unauthorized database operation...
CVE-2002-1420Integer signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory ...
CVE-2002-1422admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in th...
CVE-2002-1418Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Bu...
CVE-2002-1419The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify in...
CVE-2002-1423tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the fi...
CVE-2002-1415Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a denia...
CVE-2002-1414Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment variab...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now