Archive
May 2002
Vulnerabilities first published in this month (UTC), newest first.
222 results · Feed
-
Unscored —
RealPlayer 8 allows remote attackers to cause a denial of service (CPU utilization) via malformed .mp3 files.
-
Unscored —
Cross-site scripting vulnerability in web administration interface for NetGear RT314 and RT311 Gateway Routers allows r…
-
Unscored —
Runtime library in GNU Ada compiler (GNAT) 3.12p through 3.14p allows local users to modify files of other users via a …
-
Unscored —
PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers t…
-
Unscored —CVE-2002-0229 Public exploit
Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Saf…
-
Unscored —CVE-2002-0285 EPSS 12%
Outlook Express 5.5 and 6.0 on Windows treats a carriage return ("CR") in a message header as if it were a valid carria…
-
Unscored —CVE-2002-0331 Public exploit
Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary f…
-
Unscored —
Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked capacity contrary to its o…
-
Unscored —
ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows re…
-
Unscored —
The GetPassword function in function.php of SiteNews 0.10 and 0.11 allows remote attackers to gain privileges and add u…
-
Unscored —
Cross-site scripting (CSS) vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attac…
-
Unscored —
ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to execute arbitrary commands via shell …
-
Unscored —
Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is …
-
Unscored —
Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allo…
-
Unscored —CVE-2002-0231 Public exploit
Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nick…
-
Unscored —
Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier allows remote attackers to modify arbitrary f…
-
Unscored —
Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to sh…
-
Unscored —CVE-2002-0283 EPSS 28%
Windows XP with port 445 open allows remote attackers to cause a denial of service (CPU consumption) via a flood of TCP…
-
Unscored —
wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file.
-
Unscored —CVE-2002-0227 Public exploit
KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message.
-
Unscored —
Cross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to execute arbitrary script and…
-
Unscored —CVE-2002-0266 Public exploit
Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonex…
-
Unscored —CVE-2002-0311 Public exploit
Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root p…
-
Unscored —
Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbit…
-
Unscored —
Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary co…
-
Unscored —
Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows remote attackers to execute arbitrary code via a long bound…
-
Unscored —CVE-2002-0206 Public exploit
index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attacker…
-
Unscored —CVE-2002-0335 Public exploit
Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of serv…
-
Unscored —CVE-2002-0256 Public exploit
The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of conn…
-
Unscored —
GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to…
-
Unscored —CVE-2002-0215 Public exploit
Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi …
-
Unscored —
Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to ex…
-
Unscored —
PGP Security PGPfire 7.1 for Windows alters the system's TCP/IP stack and modifies packets in ICMP error messages in a …
-
Unscored —
Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed usern…
-
Unscored —
NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an …
-
Unscored —
Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other po…
-
Unscored —
Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a respo…
-
Unscored —
FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file.
-
Unscored —
Dino's Webserver 1.2 allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitr…
-
Unscored —CVE-2002-0336 Public exploit
Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of serv…