2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

CVE IDSeverityCVSSDescription
CVE-2002-1466——CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PHP code via...
CVE-2002-1471——The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL co...
CVE-2002-1469——scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote...
CVE-2002-1473——Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of ser...
CVE-2002-1468——Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root.
CVE-2002-1464——Cross-site scripting (XSS) vulnerability in CafeLog b2 Weblog Tool allows remote attackers to insert arbitrary HTML or s...
CVE-2002-1470——SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port...
CVE-2002-1478——Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.
CVE-2002-1479——Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions...
CVE-2002-1477——graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shel...
CVE-2002-1481——savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a den...
CVE-2002-1480——Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script...
CVE-2002-1476——Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with...
CVE-2002-1482——SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote...
CVE-2002-1483——db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP requ...
CVE-2002-1475——Unknown vulnerability in the ARP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to "take over ...
CVE-2002-1474——Unknown vulnerability or vulnerabilities in TCP/IP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attack...
CVE-2002-1143——Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the i...
CVE-2002-1408——Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community nam...
CVE-2002-1406——Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior."
CVE-2002-1411——Directory traversal vulnerability in update.dpgs in Duma Photo Gallery System (DPGS) 0.99.4 allows remote attackers to r...
CVE-2002-1410——Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries v...
CVE-2002-1413——RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication usi...
CVE-2002-1412——Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modi...
CVE-2002-1409——ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service (data page fault panic) via "an inco...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now