Archive
June 2002
Vulnerabilities first published in this month (UTC), newest first.
74 results · Clear filters · Feed
-
Unscored —CVE-2001-1354 Public exploit
NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, use…
-
Unscored —
Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP reques…
-
Unscored —CVE-2002-0492 Public exploit
dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the dat…
-
Unscored —CVE-2002-0589 Public exploit
PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling …
-
Unscored —
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create…
-
Unscored —CVE-2002-0413 Public exploit
Cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies vi…
-
Unscored —CVE-2002-0440 Public exploit
Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allow…
-
Unscored —
Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascrip…
-
Unscored —CVE-2002-0430 Public exploit
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authenticati…
-
Unscored —CVE-2002-0554 Public exploit
webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary fil…
-
Unscored —
sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via she…
-
Unscored —
Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote attackers to execute …
-
Unscored —CVE-2002-0502 Public exploit
Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp pa…
-
Unscored —
Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service (crash) and possibly ex…
-
Unscored —CVE-2002-0499 Public exploit
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without genera…
-
Unscored —CVE-2002-0572 Public exploit
FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from re…
-
Unscored —CVE-2002-0483 Public exploit
index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server whe…
-
Unscored —CVE-2002-0590 Public exploit
Cross-site scripting (CSS) vulnerability in IcrediBB 1.1 Beta allows remote attackers to execute arbitrary script and s…
-
Unscored —CVE-2002-0486 Public exploit
Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users…
-
Unscored —CVE-2002-0611 Public exploit
Directory traversal vulnerability in FileSeek.cgi allows remote attackers to read arbitrary files via a ....// (modifie…
-
Unscored —
Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames …
-
Unscored —CVE-2002-0608 Public exploit
Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long "220" banner.
-
Unscored —CVE-2002-0552 Public exploit
Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (cra…
-
Unscored —CVE-2002-0544 Public exploit
Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.c…
-
Unscored —CVE-2002-0031 Public exploit
Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a yms…
-
Unscored —CVE-2002-0607 Public exploit
members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL…
-
Unscored —
Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easil…
-
Unscored —CVE-2002-0468 Public exploit
Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileg…
-
Unscored —
IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (whi…
-
Unscored —CVE-2002-0535 Public exploit
Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other …
-
Unscored —CVE-2002-0504 Public exploit
Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method,…
-
Unscored —CVE-2002-0525 Public exploit
Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote maliciou…
-
Unscored —CVE-2002-0612 Public exploit
FileSeek.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) head or (2) foot…
-
Unscored —CVE-2002-0588 Public exploit
PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete …