2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2002-1217——Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote att...
CVE-2002-1216——GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink att...
CVE-2002-1215——Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allo...
CVE-2002-1190——Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and pla...
CVE-2002-1191——The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a de...
CVE-2002-1192——Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows ...
CVE-2002-1193——tkmail before 4.0beta9-8.1 allows local users to create or overwrite files as users via a symlink attack on temporary fi...
CVE-2002-1194——Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to ...
CVE-2002-1226——Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may ...
CVE-2002-1227——PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to g...
CVE-2002-1228——Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by kil...
CVE-2002-1195——Cross-site scripting vulnerability (XSS) in the PHP interface for ht://Check 1.1 allows remote web servers to insert arb...
CVE-2002-1196——editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups" feature is enabled ...
CVE-2002-1199——The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outsid...
CVE-2002-1198——Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which ...
CVE-2002-1200——Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not proper...
CVE-2002-1229——Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag...
CVE-2002-1197——bugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute ...
CVE-2002-1589——Unknown vulnerability in Solaris 8, when the 0x02 bit (aka TEST, KMF_DEADBEEF, or deadbeef) is set in the kmem_flags ker...
CVE-2002-1618——JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, wh...
CVE-2002-1147——The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remot...
CVE-2002-1189——The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restr...
CVE-2002-1178——Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execut...
CVE-2002-1175——The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed D...
CVE-2002-1174——Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service (crash) or execute a...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now