2002 CVE Vulnerabilities

2,393 CVEs published in 2002.

CVE IDSeverityCVSSDescription
CVE-2002-0610——Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows atta...
CVE-2002-0584——WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_p...
CVE-2002-0583——WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in ...
CVE-2002-0582——WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory,...
CVE-2002-0581——WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials ...
CVE-2002-0580——WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which le...
CVE-2002-0579——WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to...
CVE-2002-0578——Buffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitrar...
CVE-2002-0577——Vulnerability in passwd for HP-UX 11.00 and 11.11 allows local users to corrupt the password file and cause a denial of ...
CVE-2002-0576——ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm...
CVE-2002-0575——Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTo...
CVE-2002-0586——Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AO...
CVE-2002-0587——Buffer overflow in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 ...
CVE-2002-0588——PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete p...
CVE-2002-0403——DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a malf...
CVE-2002-0614——PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows remote attackers to obtain s...
CVE-2002-0380——Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute a...
CVE-2002-0401HIGH7.5SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbi...
CVE-2002-0404——Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (memory co...
CVE-2002-0042——Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) b...
CVE-2002-0589——PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling c...
CVE-2002-0590——Cross-site scripting (CSS) vulnerability in IcrediBB 1.1 Beta allows remote attackers to execute arbitrary script and st...
CVE-2002-0591——Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create ...
CVE-2002-0592——AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connec...
CVE-2002-0593——Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (cras...

Check if your code is affected by 2002 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now