Skip to content
OpenAdvisories

Archive

July 2002

Vulnerabilities first published in this month (UTC), newest first.

← June 2002 2002 / July August 2002 →
  1. 12
  2. 2 
  3. 3 
  4. 41
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 127
  13. 13 
  14. 14 
  15. 154
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 235
  24. 24 
  25. 25 
  26. 2650
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 3110
All Critical High Medium Low Exploited only Public exploit

79 results · Feed

  • Unscored —
    CVE-2002-0800

    BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at th…

  • Unscored —
    CVE-2002-0772 Public exploit

    Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary fi…

  • Unscored —
    CVE-2002-0783 Public exploit

    Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other site…

  • Unscored —
    CVE-2002-0774

    Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to ga…

  • Unscored —
    CVE-2002-0793 Public exploit

    Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwri…

  • Unscored —
    CVE-2002-0764 Public exploit EPSS 38%

    Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.ph…

  • Unscored —
    CVE-2002-0767 Public exploit

    simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which all…

  • Unscored —
    CVE-2002-0751

    CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary…

  • Unscored —
    CVE-2002-0799 Public exploit EPSS 14%

    Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argume…

  • Unscored —
    CVE-2002-0781

    RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to…

  • Unscored —
    CVE-2002-0747 Public exploit

    Buffer overflow in lsmcode in AIX 4.3.3.

  • Unscored —
    CVE-2002-0763

    Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged e…

  • Unscored —
    CVE-2002-0742

    Buffer overflow in pioout on AIX 4.3.3.

  • Unscored —
    CVE-2002-0798

    Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot…

  • Unscored —
    CVE-2002-0740 Public exploit

    Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privilege…

    slrn Debian
  • Unscored —
    CVE-2002-0796

    Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gai…

  • Unscored —
    CVE-2002-0756

    Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote at…

  • Unscored —
    CVE-2002-0644 Public exploit EPSS 11%

    Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop En…

  • Unscored —
    CVE-2002-0749 Public exploit EPSS 11%

    CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-a…

  • Unscored —
    CVE-2002-0775 Public exploit

    browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathnam…

  • Unscored —
    CVE-2001-0890

    Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local…

  • Unscored —
    CVE-2002-0715

    Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obt…

    squid Debian
  • Unscored —
    CVE-2002-0713

    Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly e…

    squid Debian
  • Unscored —
    CVE-2002-0717 EPSS 11%

    PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTT…

  • Unscored —
    CVE-2002-0702 Public exploit EPSS 31%

    Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.…

  • Unscored —
    CVE-2002-0667

    Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password, which co…

  • Unscored —
    CVE-2002-0686

    Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attac…

  • Unscored —
    CVE-2002-0675

    Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perfo…

  • Unscored —
    CVE-2002-0670

    The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames…

  • Unscored —
    CVE-2002-0641 EPSS 11%

    Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (M…

  • Unscored —
    CVE-2002-0677

    CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, …

  • Unscored —
    CVE-2002-0681 Public exploit

    Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web use…

  • Unscored —
    CVE-2002-0683

    Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (do…

  • Unscored —
    CVE-2002-0680 Public exploit

    Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL w…

  • Unscored —
    CVE-2002-0643

    The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with in…

  • Unscored —
    CVE-2002-0624 Public exploit EPSS 23%

    Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Deskto…

  • Unscored —
    CVE-2002-0637 Public exploit

    InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers…

  • Unscored —
    CVE-2002-0652 Public exploit

    xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are n…

  • Unscored —
    CVE-2002-0620 EPSS 15%

    Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to…