2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

CVE IDSeverityCVSSDescription
CVE-2002-0523——ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.
CVE-2002-0522——ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo" ...
CVE-2002-0521——Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privil...
CVE-2002-0520——Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as ot...
CVE-2002-0761——bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of sy...
CVE-2002-0517——Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems...
CVE-2002-0516——SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the TH...
CVE-2002-0515——IPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is not being filtered, which...
CVE-2002-0514——PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to deter...
CVE-2002-0513——The PHP administration script in popper_mod 1.2.1 and earlier relies on Apache .htaccess authentication, which allows re...
CVE-2002-0512——startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the cur...
CVE-2002-0511——The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records...
CVE-2002-0509——Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (...
CVE-2002-0508——wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) pro...
CVE-2002-0507——An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID auth...
CVE-2002-0506——Buffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow attackers to cause a denial ...
CVE-2002-0505——Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3....
CVE-2002-0504——Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, ...
CVE-2002-0503——Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbi...
CVE-2002-0502——Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp pag...
CVE-2002-0501——Format string vulnerability in log_print() function of Posadis DNS server before version m5pre2 allows local users and p...
CVE-2002-0500——Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG t...
CVE-2002-0499——The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generat...
CVE-2002-0498——Etnus TotalView 5.0.0-4 installs certain files with UID 5039 and GID 59, which could allow local users with that UID or ...
CVE-2002-0497——Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a lon...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now