2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

CVE IDSeverityCVSSDescription
CVE-2002-1925——Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service (crash) by via SYN, UDP, I...
CVE-2002-2135——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-1618. Reason: This candidate is a duplicate of...
CVE-2002-2196——Samba before 2.2.5 does not properly terminate the enum_csc_policy data structure, which may allow remote attackers to e...
CVE-2002-1926——Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary f...
CVE-2002-2119CRITICAL9.8Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct br...
CVE-2002-2160——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-1798. Reason: This candidate is a duplicate of...
CVE-2002-2327——Unspecified vulnerability in the environmental monitoring subsystem in Solaris 8 running on Sun Fire 280R, V480 and V880...
CVE-2002-1923——The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, whic...
CVE-2002-1657HIGH7.5PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess p...
CVE-2002-1922——Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers ...
CVE-2002-2193——Cross-site scripting (XSS) vulnerability in mojo.cgi for Mojo Mail 2.7 allows remote attackers to inject arbitrary web s...
CVE-2002-1921——The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the lo...
CVE-2002-1969——Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service (crash) via an invalid username during...
CVE-2002-1927——Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file.
CVE-2002-2391——SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitra...
CVE-2002-1919——SQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows remote attackers to execute arbitrary SQL commands and...
CVE-2002-2390——Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers t...
CVE-2002-1928——602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (ti...
CVE-2002-2191——Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obt...
CVE-2002-1917——CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attack...
CVE-2002-2197——Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service (kernel panic) via a program th...
CVE-2002-2423——Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to preve...
CVE-2002-1584——Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and ...
CVE-2002-1363——Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remo...
CVE-2002-1366——Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite ar...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now