2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

CVE IDSeverityCVSSDescription
CVE-2002-0496——The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) vi...
CVE-2002-0495——csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup comman...
CVE-2002-0494——Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascr...
CVE-2002-0493——Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, ...
CVE-2002-0492——dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the data...
CVE-2002-0491——admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrato...
CVE-2002-0490——Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbi...
CVE-2002-0489——Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shel...
CVE-2002-0488——Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacha...
CVE-2002-0487——Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which...
CVE-2002-0486——Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users ...
CVE-2002-0484——move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attack...
CVE-2002-0483——index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when...
CVE-2002-0482——Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote...
CVE-2002-0481——An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security se...
CVE-2002-0480——ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "sta...
CVE-2002-0479——Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local ...
CVE-2002-0477——Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF ...
CVE-2002-0476——Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file cont...
CVE-2002-0475——Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on...
CVE-2002-0474——Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients b...
CVE-2002-0473——db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers ...
CVE-2002-0472——MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between client...
CVE-2002-0471——PHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the a_query variable.
CVE-2002-0470——PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local ...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now