2002 CVE Vulnerabilities
2,393 CVEs published in 2002.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2002-0792 | — | — | 2.5% | Aug 12, 2002 | The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a de... |
| CVE-2002-0391 | CRITICAL | 9.8 | 58.1% | Aug 12, 2002 | Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on... |
| CVE-2002-0485 | HIGH | 7.5 | 1.5% | Aug 12, 2002 | Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Conte... |
| CVE-2002-0788 | MEDIUM | 5.5 | 0.4% | Aug 12, 2002 | An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS),... |
| CVE-2002-0793 | MEDIUM | 5.5 | 1.3% | Aug 12, 2002 | Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrit... |
| CVE-2002-0849 | — | — | 0.4% | Aug 12, 2002 | Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems,... |
| CVE-2002-0844 | HIGH | 7.8 | 0.7% | Aug 12, 2002 | Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitra... |
| CVE-2002-0794 | — | — | 1.6% | Aug 12, 2002 | The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue w... |
| CVE-2002-0795 | — | — | 0.5% | Aug 12, 2002 | The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack... |
| CVE-2002-0796 | — | — | 4.4% | Aug 12, 2002 | Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain... |
| CVE-2002-0797 | — | — | 3.3% | Aug 12, 2002 | Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root p... |
| CVE-2002-0798 | — | — | 0.5% | Aug 12, 2002 | Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot ... |
| CVE-2002-0799 | — | — | 14.3% | Aug 12, 2002 | Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argumen... |
| CVE-2002-0800 | — | — | 1.6% | Aug 12, 2002 | BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the... |
| CVE-2002-0801 | — | — | 9.1% | Aug 12, 2002 | Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a ... |
| CVE-2002-0802 | — | — | 1.1% | Aug 12, 2002 | The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a characte... |
| CVE-2002-0803 | — | — | 1.4% | Aug 12, 2002 | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and compone... |
| CVE-2002-0804 | — | — | 1.4% | Aug 12, 2002 | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote atta... |
| CVE-2002-0805 | — | — | 0.3% | Aug 12, 2002 | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writable permissions, and (... |
| CVE-2002-0806 | — | — | 0.3% | Aug 12, 2002 | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other... |
| CVE-2002-0807 | — | — | 1.3% | Aug 12, 2002 | Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attacke... |
| CVE-2002-0808 | — | — | 1.1% | Aug 12, 2002 | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to th... |
| CVE-2002-0809 | — | — | 1.1% | Aug 12, 2002 | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generate... |
| CVE-2002-0810 | — | — | 1.2% | Aug 12, 2002 | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML o... |
| CVE-2002-0811 | — | — | 1.7% | Aug 12, 2002 | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute... |
Check if your code is affected by 2002 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now