Skip to content
OpenAdvisories

Archive

June 2002

Vulnerabilities first published in this month (UTC), newest first.

← May 2002 2002 / June July 2002 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 51
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11167
  12. 12 
  13. 13 
  14. 14 
  15. 152
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25190
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

360 results · Feed

  • Unscored —
    CVE-2002-0413 Public exploit

    Cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies vi…

  • Unscored —
    CVE-2002-0472 EPSS 12%

    MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clien…

  • Unscored —
    CVE-2002-0547

    Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (c…

  • Unscored —
    CVE-2002-0446

    categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of t…

  • Unscored —
    CVE-2002-0440 Public exploit

    Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allow…

  • Unscored —
    CVE-2002-0585

    Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of servi…

  • Unscored —
    CVE-2002-0537

    The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote att…

  • Unscored —
    CVE-2002-0565

    Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, whic…

  • Unscored —
    CVE-2002-0466

    Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathna…

  • Unscored —
    CVE-2002-0481 EPSS 10%

    An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security s…

  • Unscored —
    CVE-2002-0461 Public exploit EPSS 24%

    Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascrip…

  • Unscored —
    CVE-2002-0459

    Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascri…

  • Unscored —
    CVE-2002-0430 Public exploit

    MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authenticati…

  • Unscored —
    CVE-2002-0534

    PostBoard 2.0.1 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corr…

  • Unscored —
    CVE-2002-0609

    Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service (system failure with "SA1457 o…

  • Unscored —
    CVE-2002-0554 Public exploit

    webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary fil…

  • Unscored —
    CVE-2002-0549

    Cross-site scripting vulnerabilities in Anthill allow remote attackers to execute script as other Anthill users.

  • Unscored —
    CVE-2002-0432

    Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to ca…

  • Unscored —
    CVE-2002-0436 Public exploit EPSS 12%

    sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via she…

  • Unscored —
    CVE-2002-0558

    Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user (possibly…

  • Unscored —
    CVE-2002-0587

    Buffer overflow in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0…

  • Unscored —
    CVE-2002-0426

    VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that…

  • Unscored —
    CVE-2002-0465

    Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers t…

  • Unscored —
    CVE-2002-0596

    WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request …

  • Unscored —
    CVE-2002-0527

    Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service (crash and reboot) when SOH…

  • Unscored —
    CVE-2002-0439

    Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers t…

  • Unscored —
    CVE-2002-0595 Public exploit EPSS 11%

    Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote attackers to execute …

  • Unscored —
    CVE-2002-0502 Public exploit

    Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp pa…

  • Unscored —
    CVE-2002-0458

    Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascrip…

  • Unscored —
    CVE-2002-0521

    Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privi…

  • Unscored —
    CVE-2002-0524

    ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling database-i…

  • Unscored —
    CVE-2002-0457

    Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary J…

  • Unscored —
    CVE-2002-0563 EPSS 51%

    The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive ser…

  • Unscored —
    CVE-2002-0470

    PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local…

  • Unscored —
    CVE-2002-0603

    Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service (IPSEC crash) via a zero length pack…

  • Unscored —
    CVE-2002-0606 Public exploit EPSS 11%

    Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service (crash) and possibly ex…

  • Unscored —
    CVE-2002-0562

    The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under…

  • Unscored —
    CVE-2002-0499 Public exploit

    The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without genera…

  • Unscored —
    CVE-2002-0480

    ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "st…

  • Unscored —
    CVE-2002-0560

    PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information…