Skip to content
OpenAdvisories

Archive

June 2002

Vulnerabilities first published in this month (UTC), newest first.

← May 2002 2002 / June July 2002 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 51
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11167
  12. 12 
  13. 13 
  14. 14 
  15. 152
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25190
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

360 results · Feed

  • Unscored —
    CVE-2001-1366

    netscript before 1.6.3 parses dynamic variables, which could allow remote attackers to alter program behavior or obtain…

  • Unscored —
    CVE-2001-1365

    Vulnerability in IntraGnat before 1.4.

  • Unscored —
    CVE-2001-1377

    Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allo…

  • Unscored —
    CVE-2001-1376

    Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a de…

  • Unscored —
    CVE-2001-1360

    Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned.

  • Unscored —
    CVE-2001-1355

    Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and poss…

  • Unscored —
    CVE-2001-1361

    Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the gen…

  • Unscored —
    CVE-2002-0508

    wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) pr…

  • Unscored —
    CVE-2002-0448 Public exploit EPSS 15%

    Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP reques…

  • Unscored —
    CVE-2002-0507

    An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID aut…

  • Unscored —
    CVE-2002-0492 Public exploit

    dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the dat…

  • Unscored —
    CVE-2002-0586

    Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of A…

  • Unscored —
    CVE-2002-0578

    Buffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitra…

  • Unscored —
    CVE-2002-0393

    Buffer overflow in Red-M 1050 (Bluetooth Access Point) management web interface allows remote attackers to cause a deni…

  • Unscored —
    CVE-2002-0582

    WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory…

  • Unscored —
    CVE-2002-0510

    The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, wh…

  • Unscored —
    CVE-2002-0564

    PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a …

  • Unscored —
    CVE-2002-0614

    PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows remote attackers to obtain …

  • Unscored —
    CVE-2002-0581

    WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials…

  • Unscored —
    CVE-2002-0456

    Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for att…

  • Unscored —
    CVE-2002-0405

    Buffer overflow in Transsoft Broker FTP Server 5.0 evaluation allows remote attackers to cause a denial of service and …

  • Unscored —
    CVE-2002-0522

    ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo"…

  • Unscored —
    CVE-2002-0450

    Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Mar…

  • Unscored —
    CVE-2002-0579

    WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request t…

  • Unscored —
    CVE-2002-0517

    Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating system…

  • Unscored —
    CVE-2002-0411

    Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascrip…

  • Unscored —
    CVE-2002-0555

    IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote at…

  • Unscored —
    CVE-2002-0491

    admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrat…

  • Unscored —
    CVE-2002-0523

    ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.

  • Unscored —
    CVE-2002-0561

    The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x us…

  • Unscored —
    CVE-2002-0455

    IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vu…

  • Unscored —
    CVE-2002-0589 Public exploit

    PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling …

  • Unscored —
    CVE-2002-0471

    PHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the a_query variable.

  • Unscored —
    CVE-2002-0557

    Vulnerability in OpenBSD 3.0, when using YP with netgroups in the password database, causes (1) rexec or (2) rsh to run…

  • Unscored —
    CVE-2002-0438

    ZyXEL ZyWALL 10 before 3.50 allows remote attackers to cause a denial of service via an ARP packet with the firewall's …

  • Unscored —
    CVE-2002-0518

    The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cau…

  • Unscored —
    CVE-2002-0467

    Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2002-0428

    Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modif…

  • Unscored —
    CVE-2002-0584

    WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_…

  • Unscored —
    CVE-2002-0591 Public exploit EPSS 12%

    Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create…