2002 CVE Vulnerabilities
2,393 CVEs published in 2002.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2002-0424 | — | — | 0.3% | Aug 12, 2002 | efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typical... |
| CVE-2002-0423 | — | — | 5.3% | Aug 12, 2002 | Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of servi... |
| CVE-2002-0422 | — | — | 44.3% | Aug 12, 2002 | IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (whic... |
| CVE-2002-0421 | — | — | 20.0% | Aug 12, 2002 | IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr pa... |
| CVE-2002-0420 | — | — | 1.6% | Aug 12, 2002 | Vulnerability in PureTLS before 0.9b2 related to injection attacks, which could possibly allow remote attackers to corru... |
| CVE-2002-0419 | — | — | 36.2% | Aug 12, 2002 | Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily... |
| CVE-2002-0418 | — | — | 2.2% | Aug 12, 2002 | Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36... |
| CVE-2002-0417 | — | — | 2.2% | Aug 12, 2002 | Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .... |
| CVE-2002-0416 | — | — | 5.5% | Aug 12, 2002 | Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly e... |
| CVE-2002-0415 | — | — | 1.3% | Aug 12, 2002 | Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow loc... |
| CVE-2002-0414 | — | — | 1.4% | Aug 12, 2002 | KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consu... |
| CVE-2002-0413 | — | — | 7.0% | Aug 12, 2002 | Cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies via... |
| CVE-2002-0412 | — | — | 4.2% | Aug 12, 2002 | Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code... |
| CVE-2002-0411 | — | — | 2.8% | Aug 12, 2002 | Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript... |
| CVE-2002-0783 | — | — | 2.8% | Aug 12, 2002 | Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites... |
| CVE-2002-0784 | — | — | 2.0% | Aug 12, 2002 | Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTT... |
| CVE-2002-0828 | — | — | — | Aug 12, 2002 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-0862. Reason: This is a duplicate of CVE-2002-... |
| CVE-2002-0785 | — | — | 3.7% | Aug 12, 2002 | AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the... |
| CVE-2002-0786 | — | — | 3.2% | Aug 12, 2002 | iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators ... |
| CVE-2002-0787 | — | — | 2.9% | Aug 12, 2002 | Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 all... |
| CVE-2002-0789 | — | — | 3.3% | Aug 12, 2002 | Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a ... |
| CVE-2002-0790 | — | — | 0.4% | Aug 12, 2002 | clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users ... |
| CVE-2002-0510 | — | — | 2.5% | Aug 12, 2002 | The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, whi... |
| CVE-2002-0478 | — | — | 1.7% | Aug 12, 2002 | The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via... |
| CVE-2002-0791 | — | — | 1.7% | Aug 12, 2002 | Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via... |
Check if your code is affected by 2002 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now