2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

CVE IDSeverityCVSSDescription
CVE-2002-0677——CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, a...
CVE-2002-0675——Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perfor...
CVE-2002-0674——Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator sessio...
CVE-2002-0673——The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with phy...
CVE-2002-0672——Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the...
CVE-2002-0670——The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames ...
CVE-2002-0668——The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows authenticated users to ...
CVE-2002-0667——Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password, which cou...
CVE-2002-0701——ktrace in BSD-based operating systems allows the owner of a process with special privileges to trace the process after i...
CVE-2002-0671CRITICAL9.8Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can...
CVE-2002-0653HIGH7.8Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apach...
CVE-2002-0676——SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote...
CVE-2002-0665——Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra sl...
CVE-2002-0637——InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers ...
CVE-2002-1448——An undocumented SNMP read/write community string ('NoGaH$@!') in Avaya P330, P130, and M770-ATM Cajun products allows re...
CVE-2002-0569——Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct ...
CVE-2002-0359——xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC function...
CVE-2002-0568——Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sen...
CVE-2002-0567——Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication ...
CVE-2002-0566——PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause a denial of service (cr...
CVE-2002-0565——Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which...
CVE-2002-0564——PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a D...
CVE-2002-0563——The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive serv...
CVE-2002-0562——The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under ...
CVE-2002-0561——The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x use...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now