Archive
August 2002
Vulnerabilities first published in this month (UTC), newest first.
204 results · Feed
-
Unscored —
Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before 3.0.3C allows remote attackers to cause a denial of ser…
-
Unscored —
register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter th…
-
Unscored —CVE-2002-0923 Public exploit
CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via t…
-
Unscored —CVE-2002-0902 Public exploit
Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB…
-
Unscored —
CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and me…
-
Unscored —CVE-2002-0922 Public exploit
CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) defau…
-
Unscored —CVE-2002-0893 Public exploit
Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files v…
-
Unscored —
Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, a…
-
Unscored —CVE-2002-0948 Public exploit
Scripts For Educators MakeBook 2.2 CGI program allows remote attackers to execute script as other visitors, or execute …
-
Unscored —
Multiple cross-site scripting vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allows remote attackers to execute …
-
Unscored —
The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited…
-
Unscored —CVE-2002-0907 Public exploit
Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitra…
-
Unscored —
The Install Wizard for nCipher MSCAPI CSP 5.50 does not use Operator Card Set protected keys when the user requests the…
-
Unscored —
Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a de…
-
Unscored —CVE-2002-0932 Public exploit
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers …
-
Unscored —CVE-2002-0955 Public exploit
Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remo…
-
Unscored —
Unknown vulnerability in HP Instant Support Enterprise Edition (ISEE) product U2512A for HP-UX 11.00 and 11.11 may allo…
-
Unscored —CVE-2002-0931 Public exploit
Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to ex…
-
Unscored —
Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attack…
-
Unscored —CVE-2002-0913 Public exploit
Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute a…
-
Unscored —
Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER com…
-
Unscored —
Multiple buffer overflows in mnews 1.22 and earlier allow (1) a remote NNTP server to execute arbitrary code via long r…
-
Unscored —CVE-2002-0942 Public exploit
Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary co…
-
Unscored —
Cross-site scripting vulnerability in TransWARE Active! mail 1.422 and 2.0 allows remote attackers to execute arbitrary…
-
Unscored —
Directory traversal vulnerability in cafenews.php for CARE 2002 before beta 1.0.02 allows remote attackers to read arbi…
-
Unscored —
MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attacke…
-
Unscored —CVE-2002-0876 Public exploit
Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.
-
Unscored —CVE-2002-0937 Public exploit
The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the we…
-
Unscored —
Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files vi…
-
Unscored —CVE-2002-0926 Public exploit
Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read …
-
Unscored —CVE-2002-0905 Public exploit
Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR envir…
-
Unscored —CVE-2002-0918 Public exploit
CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are …
-
Unscored —
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibl…
-
Unscored —
CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while mo…
-
Unscored —
Buffer overflow in 4D web server 6.7.3 allow remote attackers to cause a denial of service and possibly execute arbitra…
-
Unscored —
Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitr…
-
Unscored —CVE-2002-0879 Public exploit
showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style …
-
Unscored —
Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera U…
-
Unscored —
Multiple SQL injection vulnerabilities in CARE 2002 before beta 1.0.02 allow remote attackers to perform unauthorized d…
-
Unscored —CVE-2002-0962 Public exploit
Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script vi…