Skip to content
OpenAdvisories

Archive

June 2002

Vulnerabilities first published in this month (UTC), newest first.

← May 2002 2002 / June July 2002 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 51
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11167
  12. 12 
  13. 13 
  14. 14 
  15. 152
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25190
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

360 results · Feed

  • Unscored —
    CVE-2002-0593

    Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (cra…

  • Unscored —
    CVE-2002-0496

    The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) v…

  • Unscored —
    CVE-2002-0551

    Cross-site scripting vulnerability in Dynamic Guestbook 3.0 allows remote attackers to execute code in clients who acce…

  • Unscored —
    CVE-2002-0433

    Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard or asteris…

  • Unscored —
    CVE-2002-0408

    htcgibin.exe in Lotus Domino server 5.0.9a and earlier, when configured with the NoBanner setting, allows remote attack…

  • Unscored —
    CVE-2002-0416

    Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly …

  • Unscored —
    CVE-2002-0417

    Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a …

  • Unscored —
    CVE-2002-0570

    The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, …

  • Unscored —
    CVE-2002-0533

    phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt …

  • Unscored —
    CVE-2002-0600

    Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the…

  • Unscored —
    CVE-2002-0566

    PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause a denial of service (c…

  • Unscored —
    CVE-2002-0503

    Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arb…

  • Unscored —
    CVE-2002-0559 EPSS 13%

    Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a d…

  • Unscored —
    CVE-2002-0568 EPSS 75%

    Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain se…

  • Unscored —
    CVE-2002-0572 Public exploit

    FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from re…

  • Unscored —
    CVE-2002-0483 Public exploit

    index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server whe…

  • Unscored —
    CVE-2002-0610

    Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows att…

  • Unscored —
    CVE-2002-0514

    PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to dete…

  • Unscored —
    CVE-2002-0590 Public exploit

    Cross-site scripting (CSS) vulnerability in IcrediBB 1.1 Beta allows remote attackers to execute arbitrary script and s…

  • Unscored —
    CVE-2002-0427

    Buffer overflows in fpexec in mod_frontpage before 1.6.1 may allow attackers to gain root privileges.

  • Unscored —
    CVE-2002-0415

    Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow lo…

  • Unscored —
    CVE-2002-0486 Public exploit

    Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users…

  • Unscored —
    CVE-2002-0487

    Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, whic…

  • Unscored —
    CVE-2002-0500 EPSS 16%

    Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG …

  • Unscored —
    CVE-2002-0580

    WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which l…

  • Unscored —
    CVE-2002-0577

    Vulnerability in passwd for HP-UX 11.00 and 11.11 allows local users to corrupt the password file and cause a denial of…

  • Unscored —
    CVE-2002-0489

    Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via she…

  • Unscored —
    CVE-2002-0611 Public exploit

    Directory traversal vulnerability in FileSeek.cgi allows remote attackers to read arbitrary files via a ....// (modifie…

  • Unscored —
    CVE-2002-0410

    send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just…

  • Unscored —
    CVE-2002-0556

    Directory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read arbitrary files via a .…

  • Unscored —
    CVE-2002-0509

    Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2002-0447

    Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary …

  • Unscored —
    CVE-2002-0540 Public exploit EPSS 20%

    Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames …

  • Unscored —
    CVE-2002-0469

    Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is inst…

  • Unscored —
    CVE-2002-0474

    Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients …

  • Unscored —
    CVE-2002-0529

    HP Photosmart printer driver for Mac OS X installs the hp_imaging_connectivity program and the hp_imaging_connectivity.…

  • Unscored —
    CVE-2002-0418

    Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.3…

  • Unscored —
    CVE-2002-0548

    Anthill allows remote attackers to bypass authentication and file bug reports by directly accessing the postbug.php pro…

  • Unscored —
    CVE-2002-0409 EPSS 28%

    orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.…

  • Unscored —
    CVE-2002-0583

    WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in…