11 June 2002

167 results · Feed

• Unscored —
  CVE-2002-0540 Public exploit EPSS 20%

  Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames …

  Jun 11, 2002
• Unscored —
  CVE-2002-0469

  Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is inst…

  Jun 11, 2002
• Unscored —
  CVE-2002-0474

  Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients …

  Jun 11, 2002
• Unscored —
  CVE-2002-0529

  HP Photosmart printer driver for Mac OS X installs the hp_imaging_connectivity program and the hp_imaging_connectivity.…

  Jun 11, 2002
• Unscored —
  CVE-2002-0418

  Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.3…

  Jun 11, 2002
• Unscored —
  CVE-2002-0548

  Anthill allows remote attackers to bypass authentication and file bug reports by directly accessing the postbug.php pro…

  Jun 11, 2002
• Unscored —
  CVE-2002-0409 EPSS 28%

  orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.…

  Jun 11, 2002
• Unscored —
  CVE-2002-0583

  WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in…

  Jun 11, 2002
• Unscored —
  CVE-2002-0434

  Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters i…

  Jun 11, 2002
• Unscored —
  CVE-2002-0608 Public exploit

  Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long "220" banner.

  Jun 11, 2002
• Unscored —
  CVE-2002-0552 Public exploit

  Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (cra…

  Jun 11, 2002
• Unscored —
  CVE-2002-0544 Public exploit

  Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.c…

  Jun 11, 2002
• Unscored —
  CVE-2002-0604

  Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service (crash) via a large number…

  Jun 11, 2002
• Unscored —
  CVE-2002-0550

  Dynamic Guestbook 3.0 allows remote attackers to execute arbitrary code via shell metacharacters in the gbdaten paramet…

  Jun 11, 2002
• Unscored —
  CVE-2002-0460

  Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a larg…

  Jun 11, 2002
• Unscored —
  CVE-2002-0420

  Vulnerability in PureTLS before 0.9b2 related to injection attacks, which could possibly allow remote attackers to corr…

  Jun 11, 2002
• Unscored —
  CVE-2002-0453

  The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout pe…

  Jun 11, 2002
• Unscored —
  CVE-2002-0407

  htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathname for t…

  Jun 11, 2002
• Unscored —
  CVE-2002-0530

  Cross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute arbitrary script as ot…

  Jun 11, 2002
• Unscored —
  CVE-2002-0449

  Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code vi…

  Jun 11, 2002
• Unscored —
  CVE-2002-0476

  Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file con…

  Jun 11, 2002
• Unscored —
  CVE-2002-0479

  Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local…

  Jun 11, 2002
• Unscored —
  CVE-2002-0475

  Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript o…

  Jun 11, 2002
• High 7.5
  CVE-2002-0485

  Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Cont…

  Jun 11, 2002
• Unscored —
  CVE-2002-0031 Public exploit

  Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a yms…

  Jun 11, 2002
• Unscored —
  CVE-2002-0607 Public exploit

  members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL…

  Jun 11, 2002
• Unscored —
  CVE-2002-0541

  Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acce…

  Jun 11, 2002
• Unscored —
  CVE-2002-0419 Public exploit EPSS 37%

  Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easil…

  Jun 11, 2002
• Unscored —
  CVE-2002-0477

  Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF…

  Jun 11, 2002
• Unscored —
  CVE-2002-0520

  Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as o…

  Jun 11, 2002
• Unscored —
  CVE-2002-0468 Public exploit

  Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileg…

  Jun 11, 2002
• Unscored —
  CVE-2002-0478

  The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information vi…

  Jun 11, 2002
• Unscored —
  CVE-2002-0422 Public exploit EPSS 51%

  IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (whi…

  Jun 11, 2002
• Unscored —
  CVE-2002-0535 Public exploit

  Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other …

  Jun 11, 2002
• Unscored —
  CVE-2002-0528

  Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set be…

  Jun 11, 2002
• Unscored —
  CVE-2002-0592

  AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by conne…

  Jun 11, 2002
• Unscored —
  CVE-2002-0421 EPSS 20%

  IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr p…

  Jun 11, 2002
• Unscored —
  CVE-2002-0452

  Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for a…

  Jun 11, 2002
• Unscored —
  CVE-2002-0602

  Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service (crash) via a large number…

  Jun 11, 2002
• Unscored —
  CVE-2002-0504 Public exploit

  Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method,…

  Jun 11, 2002