2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2002-0487——Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which...
CVE-2002-0486——Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users ...
CVE-2002-0484——move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attack...
CVE-2002-0483——index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when...
CVE-2002-0482——Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote...
CVE-2002-0481——An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security se...
CVE-2002-0480——ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "sta...
CVE-2002-0479——Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local ...
CVE-2002-0477——Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF ...
CVE-2002-0476——Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file cont...
CVE-2002-0475——Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on...
CVE-2002-0474——Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients b...
CVE-2002-0473——db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers ...
CVE-2002-0472——MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between client...
CVE-2002-0471——PHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the a_query variable.
CVE-2002-0470——PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local ...
CVE-2002-0469——Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is insta...
CVE-2002-0468——Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privilege...
CVE-2002-0467——Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrar...
CVE-2002-0466——Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathnam...
CVE-2002-0465——Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to...
CVE-2002-0464——Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arb...
CVE-2002-0463——home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allows remote attackers to determine the full pathname of the we...
CVE-2002-0462——bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to c...
CVE-2002-0461——Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now