Skip to content
OpenAdvisories

Archive

May 2002

Vulnerabilities first published in this month (UTC), newest first.

← April 2002 2002 / May June 2002 →
  1. 1 
  2. 2 
  3. 3218
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 91
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 171
  18. 18 
  19. 19 
  20. 20 
  21. 211
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 311
All Critical High Medium Low Exploited only Public exploit

222 results · Feed

  • Unscored —
    CVE-2002-0328 Public exploit

    Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikon…

  • Unscored —
    CVE-2002-0220

    phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing sh…

  • Unscored —
    CVE-2002-0236 Public exploit

    Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers…

  • Unscored —
    CVE-2002-0341

    GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathn…

  • Unscored —
    CVE-2002-0222

    Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.

  • Unscored —
    CVE-2002-0305

    Zero One Tech (ZOT) P100s print server does not properly disable the SNMP service or change the default password, which…

  • Unscored —
    CVE-2002-0277

    Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in …

  • Unscored —
    CVE-2002-0198

    Buffer overflow in plDaniels ripMime 1.2.6 and earlier, as used in other programs such as xamime and inflex, allows rem…

  • Unscored —
    CVE-2002-0344

    Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in…

  • Unscored —
    CVE-2002-0201 Public exploit EPSS 21%

    Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute …

  • Unscored —
    CVE-2002-0259

    InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in (1) .pwd files in t…

  • Unscored —
    CVE-2002-0235

    Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to…

  • Unscored —
    CVE-2002-0272

    Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long…

  • Unscored —
    CVE-2002-0280 Public exploit

    Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2002-0239 Public exploit

    Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) …

  • Unscored —
    CVE-2002-0200 Public exploit

    Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS…

  • Unscored —
    CVE-2002-0333 Public exploit

    Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to …

  • Unscored —
    CVE-2002-0199

    Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service a…

  • Unscored —
    CVE-2002-0323

    comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by specifying the target file as a…

  • Unscored —
    CVE-2002-0304

    Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request.

  • Unscored —
    CVE-2002-0262

    Directory traversal vulnerability in netget for Sybex E-Trainer web server allows remote attackers to read arbitrary fi…

  • Unscored —
    CVE-2002-0310

    Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by th…