Skip to content
OpenAdvisories

Archive

May 2002

Vulnerabilities first published in this month (UTC), newest first.

← April 2002 2002 / May June 2002 →
  1. 1 
  2. 2 
  3. 3218
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 91
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 171
  18. 18 
  19. 19 
  20. 20 
  21. 211
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 311
All Critical High Medium Low Exploited only Public exploit

222 results · Feed

  • Unscored —
    CVE-2002-0388 Public exploit

    Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admi…

  • Unscored —
    CVE-2002-0360

    Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filen…

  • Unscored —
    CVE-2002-0189 Public exploit EPSS 14%

    Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Com…

  • Unscored —
    CVE-2002-0375 Public exploit

    Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript…

  • Unscored —
    CVE-2001-1314

    Buffer overflows in Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to ca…

  • Unscored —
    CVE-2001-1268

    Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files duri…

  • Unscored —
    CVE-2001-1271

    Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive …

  • Unscored —
    CVE-2001-1336

    CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers…

  • Unscored —
    CVE-2001-1258

    Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Ho…

  • Unscored —
    CVE-2001-1304

    Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP…

  • Unscored —
    CVE-2001-1241

    Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows r…

  • Unscored —
    CVE-2001-1285

    Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access…

  • Unscored —
    CVE-2001-1256

    kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink att…

  • Unscored —
    CVE-2001-1248

    vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a…

  • Unscored —
    CVE-2001-1305

    ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list v…

  • Unscored —
    CVE-2001-1249

    vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names.

  • Unscored —
    CVE-2001-1233

    Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services (NDS) enabled allows r…

  • Unscored —
    CVE-2001-1330

    Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.

  • Unscored —
    CVE-2001-1292

    Sambar Telnet Proxy/Server allows remote attackers to cause a denial of service and possibly execute arbitrary code via…

  • Unscored —
    CVE-2001-1315

    Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2001-1298

    Webodex PHP script 1.0 and earlier allows remote attackers to include arbitrary files from remote web sites via an HTTP…

  • Unscored —
    CVE-2001-1318

    Vulnerabilities in Qualcomm Eudora WorldMail Server may allow remote attackers to cause a denial of service (crash) and…

  • Unscored —
    CVE-2001-1300

    Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files v…

  • Unscored —
    CVE-2001-1259 Public exploit

    Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payl…

  • Unscored —
    CVE-2001-1273

    The "mxcsr P4" vulnerability in the Linux kernel before 2.2.17-14, when running on certain Intel CPUs, allows local use…

  • Unscored —
    CVE-2001-1332

    Buffer overflows in Linux CUPS before 1.1.6 may allow remote attackers to execute arbitrary code.

  • Unscored —
    CVE-2001-1283

    The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of servic…

  • Unscored —
    CVE-2001-1329

    Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.

  • Unscored —
    CVE-2001-1270

    Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwri…

  • Unscored —
    CVE-2001-1282

    Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow…

  • Unscored —
    CVE-2001-1287 Public exploit

    Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code vi…

  • Unscored —
    CVE-2001-1278

    Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the metho…

  • Unscored —
    CVE-2001-1250

    vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, p…

  • Unscored —
    CVE-2001-1280

    POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which al…

  • Unscored —
    CVE-2001-1339 Public exploit

    Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entere…

  • Unscored —
    CVE-2001-1265

    Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthoriz…

  • Unscored —
    CVE-2001-1253

    Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could…

  • Unscored —
    CVE-2001-1294

    Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service (crash) …

  • Unscored —
    CVE-2001-1254

    Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear…

  • Unscored —
    CVE-2001-1275

    MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administr…