Archive
February 2002
Vulnerabilities first published in this month (UTC), newest first.
117 results · Feed
-
Unscored —CVE-2002-0056 EPSS 25%
Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider…
-
Unscored —
Buffer overflow in CDE Print Viewer (dtprintinfo) allows local users to execute arbitrary code by copying text from the…
-
Unscored —CVE-2001-0542 EPSS 14%
Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary co…
-
Unscored —CVE-2002-0012 EPSS 24%
Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain p…
-
Unscored —
Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to caus…
-
Unscored —
Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other ve…
-
Unscored —CVE-2002-0053 EPSS 35%
Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote…
-
Unscored —CVE-2001-0999 EPSS 12%
Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MI…
-
Unscored —
Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into…
-
Unscored —
shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters i…
-
Unscored —
Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2…
-
Unscored —
Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows rem…
-
Unscored —
Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharac…
-
Unscored —CVE-2001-0898 Public exploit
Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domai…
-
Unscored —
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive fil…
-
Unscored —
ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs a…
-
Unscored —
PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to…
-
Unscored —
Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 t…
-
Unscored —
Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain…
-
Unscored —
Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to …
-
Unscored —CVE-2001-0924 Public exploit
Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrar…
-
Unscored —
Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be lock…
-
Unscored —
PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or …
-
Unscored —CVE-2001-0985 Public exploit
shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacha…
-
Unscored —
Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly exe…
-
Unscored —
Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and re…
-
Unscored —CVE-2001-0983 Public exploit
UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read t…
-
Unscored —CVE-2001-0979 Public exploit
Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a lon…
-
Unscored —
Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimize…
-
Unscored —
Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remo…
-
Unscored —
dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute th…
-
Unscored —
Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow…
-
Unscored —
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to ste…
-
Unscored —
DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a co…
-
Unscored —
Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory,…
-
Unscored —
Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitra…
-
Unscored —
SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as t…
-
Unscored —
Vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, as used by HP-UX Workload Manager (WLM), allo…
-
Unscored —
Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters.
-
Unscored —
Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to ex…