Skip to content
OpenAdvisories

Archive

May 2002

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3218
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 91
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 171
  18. 18 
  19. 19 
  20. 20 
  21. 211
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 311

54 results · Clear filters · Feed

  • Unscored —
    CVE-2002-0388 Public exploit

    Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admi…

  • Unscored —
    CVE-2002-0189 Public exploit EPSS 14%

    Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Com…

  • Unscored —
    CVE-2002-0375 Public exploit

    Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript…

  • Unscored —
    CVE-2001-1259 Public exploit

    Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payl…

  • Unscored —
    CVE-2001-1287 Public exploit

    Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code vi…

  • Unscored —
    CVE-2001-1339 Public exploit

    Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entere…

  • Unscored —
    CVE-2001-1244 Public exploit EPSS 22%

    Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) b…

  • Unscored —
    CVE-2001-1290 Public exploit

    admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify t…

  • Unscored —
    CVE-2001-1320 Public exploit EPSS 68%

    Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute …

  • Unscored —
    CVE-2001-1346 Public exploit

    Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files vi…

  • Unscored —
    CVE-2001-1274 Public exploit

    Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.

  • Unscored —
    CVE-2001-1289 Public exploit

    Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection p…

  • Unscored —
    CVE-2001-1335 Public exploit

    Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) t…

  • Unscored —
    CVE-2001-1344 Public exploit

    WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename tha…

  • Unscored —
    CVE-2001-1243 Public exploit EPSS 71%

    Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial …

  • Unscored —
    CVE-2001-1343 Public exploit

    ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code vi…

  • Unscored —
    CVE-2001-1325 Public exploit EPSS 27%

    Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active S…

  • Unscored —
    CVE-2001-1263 Public exploit

    telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large…

  • Unscored —
    CVE-2001-1326 Public exploit

    Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the …

  • Unscored —
    CVE-2002-0332 Public exploit

    Buffer overflows in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2002-0325 Public exploit EPSS 38%

    Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (mo…

  • Unscored —
    CVE-2002-0244 Public exploit

    Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. (dot …

  • Unscored —
    CVE-2002-0288 Public exploit

    Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (…

  • Unscored —
    CVE-2002-0338 Public exploit

    The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) …

  • Unscored —
    CVE-2002-0346 Public exploit

    Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt …

  • Unscored —
    CVE-2002-0327 Public exploit

    Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the call…

  • Unscored —
    CVE-2002-0319 Public exploit

    Cross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote attackers to execute scrip…

  • Unscored —
    CVE-2002-0229 Public exploit

    Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Saf…

  • Unscored —
    CVE-2002-0331 Public exploit

    Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2002-0231 Public exploit

    Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nick…

  • Unscored —
    CVE-2002-0227 Public exploit

    KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message.

  • Unscored —
    CVE-2002-0266 Public exploit

    Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonex…

  • Unscored —
    CVE-2002-0311 Public exploit

    Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root p…

  • Unscored —
    CVE-2002-0289 Public exploit EPSS 13%

    Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary co…

  • Unscored —
    CVE-2002-0263 Public exploit EPSS 13%

    Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows remote attackers to execute arbitrary code via a long bound…

  • Unscored —
    CVE-2002-0206 Public exploit

    index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attacker…

  • Unscored —
    CVE-2002-0335 Public exploit

    Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2002-0256 Public exploit

    The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of conn…

  • Unscored —
    CVE-2002-0215 Public exploit

    Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi …

  • Unscored —
    CVE-2002-0252 Public exploit EPSS 11%

    Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a respo…