Archive
May 2002
Vulnerabilities first published in this month (UTC), newest first.
222 results · Feed
-
Unscored —
Buffer overflows in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of servi…
-
Unscored —
PowerNet IX allows remote attackers to cause a denial of service via a port scan.
-
Unscored —
Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execut…
-
Unscored —
The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers t…
-
Unscored —
cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pa…
-
Unscored —
Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a…
-
Unscored —CVE-2001-1343 Public exploit
ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code vi…
-
Unscored —
Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active S…
-
Unscored —
Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and pos…
-
Unscored —
Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of…
-
Unscored —CVE-2001-1263 Public exploit
telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large…
-
Unscored —CVE-2001-1326 Public exploit
Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the …
-
Unscored —
Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Fi…
-
Unscored —
Merak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions, which c…
-
Unscored —CVE-2002-0332 Public exploit
Buffer overflows in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to execute arbitrary…
-
Unscored —
Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling …
-
Unscored —
Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP req…
-
Unscored —
Etype Eserv 2.97 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of PASV …
-
Unscored —
HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via …
-
Unscored —
Cross-site scripting vulnerability in Opera 6.0 and earlier allows remote attackers to execute arbitrary script via an …
-
Unscored —
Directory traversal vulnerability in ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to …
-
Unscored —
Buffer overflows in CFS daemon (cfsd) before 1.3.3-8.1, and 1.4x before 1.4.1-5, allow remote attackers to cause a deni…
-
Unscored —
Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (mo…
-
Unscored —
Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a l…
-
Unscored —CVE-2002-0244 Public exploit
Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. (dot …
-
Unscored —CVE-2002-0288 Public exploit
Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (…
-
Unscored —
admin.asp in AdMentor 2.11 allows remote attackers to bypass authentication and gain privileges via a SQL injection att…
-
Unscored —CVE-2002-0338 Public exploit
The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) …
-
Unscored —
PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to (1) obtain t…
-
Unscored —
Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 …
-
Unscored —
Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain infor…
-
Unscored —CVE-2002-0346 Public exploit
Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt …
-
Unscored —
Directory traversal vulnerability in Essentia Web Server 2.1 allows remote attackers to read arbitrary files via a .. (…
-
Unscored —CVE-2002-0224 EPSS 29%
The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL…
-
Unscored —
Buffer overflow in InstantServers MiniPortal 1.1.5 and earlier allows remote attackers to execute arbitrary code via a …
-
Unscored —
Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow a…
-
Unscored —CVE-2002-0327 Public exploit
Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the call…
-
Unscored —
Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the serve…
-
Unscored —
The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is pro…
-
Unscored —CVE-2002-0319 Public exploit
Cross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote attackers to execute scrip…