2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

CVE IDSeverityCVSSDescription
CVE-2002-0329——Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary ...
CVE-2002-0382——XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lo...
CVE-2002-0381——The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast a...
CVE-2002-0379——Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001...
CVE-2002-0360——Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filena...
CVE-2002-0354——The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files an...
CVE-2002-0353——The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certai...
CVE-2002-0352——Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP requ...
CVE-2002-0351——Buffer overflows in CFS daemon (cfsd) before 1.3.3-8.1, and 1.4x before 1.4.1-5, allow remote attackers to cause a denia...
CVE-2002-0350——HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via a...
CVE-2002-0349——Tiny Personal Firewall (TPF) 2.0.15, under certain configurations, will pop up an alert to the system even when the scre...
CVE-2002-0348——service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, v...
CVE-2002-0347——Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly...
CVE-2002-0346——Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt u...
CVE-2002-0345——Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an...
CVE-2002-0344——Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in ...
CVE-2002-0343——Hotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the bookmarks file, which c...
CVE-2002-0342——Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is a...
CVE-2002-0341——GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathna...
CVE-2002-0340——Windows Media Player (WMP) 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other ...
CVE-2002-0339——Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of previous packets in the p...
CVE-2002-0338——The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) v...
CVE-2002-0337——RealPlayer 8 allows remote attackers to cause a denial of service (CPU utilization) via malformed .mp3 files.
CVE-2002-0336——Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of servi...
CVE-2002-0335——Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of servi...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now