2002 CVE Vulnerabilities
2,393 CVEs published in 2002.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2002-0439 | — | — | 1.6% | Jul 26, 2002 | Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to... |
| CVE-2002-0438 | — | — | 1.8% | Jul 26, 2002 | ZyXEL ZyWALL 10 before 3.50 allows remote attackers to cause a denial of service via an ARP packet with the firewall's I... |
| CVE-2002-0437 | — | — | 3.4% | Jul 26, 2002 | Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacha... |
| CVE-2002-0436 | — | — | 11.9% | Jul 26, 2002 | sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shel... |
| CVE-2002-0435 | — | — | 0.3% | Jul 26, 2002 | Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and ... |
| CVE-2002-0434 | — | — | 3.4% | Jul 26, 2002 | Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in... |
| CVE-2002-0663 | — | — | 3.3% | Jul 26, 2002 | Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001 ... |
| CVE-2002-0703 | — | — | 1.4% | Jul 26, 2002 | An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5 checksums for UTF-8 da... |
| CVE-2002-0393 | — | — | 6.5% | Jul 26, 2002 | Buffer overflow in Red-M 1050 (Bluetooth Access Point) management web interface allows remote attackers to cause a denia... |
| CVE-2002-0675 | — | — | 0.4% | Jul 23, 2002 | Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perfor... |
| CVE-2002-0668 | — | — | 1.3% | Jul 23, 2002 | The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows authenticated users to ... |
| CVE-2002-0677 | — | — | 6.6% | Jul 23, 2002 | CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, a... |
| CVE-2002-0678 | — | — | 9.4% | Jul 23, 2002 | CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the tr... |
| CVE-2002-0680 | — | — | 3.5% | Jul 23, 2002 | Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL wi... |
| CVE-2002-0681 | — | — | 8.3% | Jul 23, 2002 | Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web user... |
| CVE-2002-0682 | — | — | 12.2% | Jul 23, 2002 | Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users v... |
| CVE-2002-0685 | — | — | 2.6% | Jul 23, 2002 | Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP ... |
| CVE-2002-0667 | — | — | 2.6% | Jul 23, 2002 | Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password, which cou... |
| CVE-2002-0683 | — | — | 3.7% | Jul 23, 2002 | Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (dot... |
| CVE-2002-0643 | — | — | 1.7% | Jul 23, 2002 | The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with ins... |
| CVE-2002-0642 | — | — | 49.7% | Jul 23, 2002 | The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft... |
| CVE-2002-0641 | — | — | 11.2% | Jul 23, 2002 | Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MS... |
| CVE-2002-0624 | — | — | 22.8% | Jul 23, 2002 | Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop... |
| CVE-2002-0674 | — | — | 0.4% | Jul 23, 2002 | Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator sessio... |
| CVE-2002-1599 | — | — | 1.9% | Jul 23, 2002 | DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs. |
Check if your code is affected by 2002 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now