Skip to content
OpenAdvisories

Archive

August 2002

Vulnerabilities first published in this month (UTC), newest first.

← July 2002 2002 / August September 2002 →
  1. 12
  2. 24
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 74
  8. 8 
  9. 9 
  10. 105
  11. 11 
  12. 12 
  13. 13 
  14. 144
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 208
  21. 21 
  22. 22 
  23. 2312
  24. 243
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31162
All Critical High Medium Low Exploited only Public exploit

69 results · Clear filters · Feed

  • Unscored —
    CVE-2002-1042 Public exploit

    Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise …

  • Unscored —
    CVE-2002-1027 Public exploit

    Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 …

  • Unscored —
    CVE-2002-1036 Public exploit

    Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote…

  • Unscored —
    CVE-2002-1075 Public exploit

    Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) an…

  • Unscored —
    CVE-2002-1009 Public exploit

    Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attacker…

  • Unscored —
    CVE-2002-1089 Public exploit

    rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, whic…

  • Unscored —
    CVE-2002-1008 Public exploit

    Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attac…

  • Unscored —
    CVE-2002-1033 Public exploit

    Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files …

  • Unscored —
    CVE-2002-1021 Public exploit

    BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a h…

  • Unscored —
    CVE-2002-1043 Public exploit

    Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Subject ("\t\t").

  • Unscored —
    CVE-2002-1073 Public exploit

    Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2002-1072 Public exploit

    ZyXEL Prestige 642R 2.50(FA.1) and Prestige 310 V3.25(M.01), allows remote attackers to cause a denial of service via a…

  • Unscored —
    CVE-2002-1029 Public exploit

    Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service (crash) via a mal…

  • Unscored —
    CVE-2002-1001 Public exploit

    Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute…

  • Unscored —
    CVE-2002-1034 Public exploit

    none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argum…

  • Unscored —
    CVE-1999-1569 Public exploit

    Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconn…

  • Unscored —
    CVE-2002-0723 Public exploit EPSS 15%

    Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which a…

  • Unscored —
    CVE-2002-0724 Public exploit EPSS 26%

    Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows att…

  • Unscored —
    CVE-2002-0976 Public exploit EPSS 14%

    Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy X…

  • Unscored —
    CVE-2002-0982 Public exploit

    Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @sc…

  • Unscored —
    CVE-2002-0980 Public exploit EPSS 27%

    The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary…

  • Unscored —
    CVE-2002-0721 Public exploit EPSS 46%

    Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated wit…

  • Unscored —
    CVE-2002-0874 Public exploit

    Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to re…

  • Unscored —
    CVE-2002-0654 Public exploit EPSS 59%

    Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the se…

    apache2 Debian
  • Unscored —
    CVE-2002-0855 Public exploit

    Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users vi…

  • Unscored —
    CVE-2002-0812 Public exploit

    Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identi…

  • Unscored —
    CVE-2002-0661 Public exploit EPSS 70%

    Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to …

    apache2 Debian
  • Unscored —
    CVE-2000-1209 Public exploit EPSS 87%

    The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3…

  • Unscored —
    CVE-2002-0833 Public exploit

    Buffer overflow in Eudora 5.1.1 and 5.0-J for Windows, and possibly other versions, allows remote attackers to execute …