Archive
May 2002
Vulnerabilities first published in this month (UTC), newest first.
222 results · Feed
-
Unscored —
PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini f…
-
Unscored —CVE-2002-0210 Public exploit
setlicense for TOLIS Group Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a …
-
Unscored —
Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system…
-
Unscored —
PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers to obtain the phys…
-
Unscored —
Buffer overflows in wmtv 0.6.5 and earlier may allow local users to gain privileges.
-
Unscored —
Directory traversal vulnerability in InstantServers MiniPortal 1.1.5 and earlier allows remote authenticated users to r…
-
Unscored —
The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause…
-
Unscored —
Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files vi…
-
Unscored —
The default configuration of Arescom NetDSL 800 does not require authentication, which allows remote attackers to cause…
-
Unscored —
Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other …
-
Unscored —CVE-2002-0230 Public exploit
Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascr…
-
Unscored —
Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password …
-
Unscored —CVE-2002-0242 EPSS 11%
Cross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to execute arbitrary script v…
-
Unscored —CVE-2002-0296 Public exploit
The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the…
-
Unscored —
Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalen…
-
Unscored —CVE-2002-0316 Public exploit
Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute s…
-
Unscored —
Identix BioLogon 3 allows users with physical access to the system to gain administrative privileges by using CTRL-ALT-…
-
Unscored —CVE-2002-0347 Public exploit
Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibl…
-
Unscored —
Hotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the bookmarks file, which …
-
Unscored —
The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certa…
-
Unscored —
PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the…
-
Unscored —
userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the…
-
Unscored —CVE-2002-0269 EPSS 11%
Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, whi…
-
Unscored —
Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) and poss…
-
Unscored —
tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with …
-
Unscored —
xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows local users to modify files via a symlink attack on the .…
-
Unscored —CVE-2002-0348 Public exploit
service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, …
-
Unscored —
The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files a…
-
Unscored —
Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of ar…
-
Unscored —
Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arb…
-
Unscored —
Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML docume…
-
Unscored —
DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct request t…
-
Unscored —
ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET reques…
-
Unscored —
fasttrack p2p, as used in (1) KaZaA before 1.5, (2) grokster, and (3) morpheus allows remote attackers to cause a denia…
-
Unscored —
fasttrack p2p, as used in (1) KaZaA, (2) grokster, and (3) morpheus allows remote attackers to spoof other users by mod…
-
Unscored —
Gator ActiveX component (IEGator.dll) 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Tro…
-
Unscored —
Tiny Personal Firewall (TPF) 2.0.15, under certain configurations, will pop up an alert to the system even when the scr…
-
Unscored —CVE-2002-0228 EPSS 20%
Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive…
-
Unscored —
Windows Media Player (WMP) 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other…
-
Unscored —
ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that contains…