Skip to content
OpenAdvisories

Archive

August 2002

Vulnerabilities first published in this month (UTC), newest first.

← July 2002 2002 / August September 2002 →
  1. 12
  2. 24
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 74
  8. 8 
  9. 9 
  10. 105
  11. 11 
  12. 12 
  13. 13 
  14. 144
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 208
  21. 21 
  22. 22 
  23. 2312
  24. 243
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31162
All Critical High Medium Low Exploited only Public exploit

204 results · Feed

  • Unscored —
    CVE-2002-0961 Public exploit

    Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as othe…

  • Unscored —
    CVE-2002-0915

    autorun in Xandros based Linux distributions allows local users to read the first line of arbitrary files via the -c pa…

  • Unscored —
    CVE-2002-0933

    Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remo…

  • Unscored —
    CVE-2002-0896

    The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the thro…

    swatch Debian
  • Unscored —
    CVE-2002-0991 Public exploit

    Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, al…

  • Unscored —
    CVE-2002-0912

    in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long st…

  • Unscored —
    CVE-2002-0994 Public exploit

    SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing t…

  • Unscored —
    CVE-2002-0959 Public exploit

    Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other use…

  • Unscored —
    CVE-2002-0992

    Unknown vulnerability in IPV6 functionality for DCE daemons (1) dced or (2) rpcd on HP-UX 11.11 allows attackers to cau…

  • Unscored —
    CVE-2002-0878

    SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (…

  • Unscored —
    CVE-2002-0957

    The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allo…

  • Unscored —
    CVE-2002-0883

    Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Teln…

  • Unscored —
    CVE-2002-0899

    Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via …

  • Unscored —
    CVE-2002-1083

    Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to (1) cr…

  • Unscored —
    CVE-2002-1020

    The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum n…

  • Unscored —
    CVE-2002-1058 Public exploit

    Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to ga…

  • Unscored —
    CVE-2002-1067

    Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows remote attackers to cause a…

  • Unscored —
    CVE-2002-1080

    The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and mod…

  • Unscored —
    CVE-2002-1028 Public exploit

    Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to ca…

  • Unscored —
    CVE-2002-1016 Public exploit

    Adobe eBook Reader allows a user to bypass restrictions for copy, print, lend, and give operations by backing up key da…

  • Unscored —
    CVE-2002-1047

    The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password …

  • Unscored —
    CVE-2002-1069

    The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication…

  • Unscored —
    CVE-2002-1023 Public exploit

    BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.

  • Unscored —
    CVE-2002-1055

    Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2002-1041

    Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames.

  • Unscored —
    CVE-2002-1045

    Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Date field that is …

  • Unscored —
    CVE-2002-1048 Public exploit EPSS 14%

    HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet servi…

  • Unscored —
    CVE-2002-1082

    The Image Upload capability for ezContents 1.40 and earlier allows remote attackers to cause ezContents to perform oper…

  • Unscored —
    CVE-2002-1026

    Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2002-1038

    Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers…

  • Unscored —
    CVE-2002-1032

    Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and …

  • Unscored —
    CVE-2002-1077 Public exploit EPSS 11%

    IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HT…

  • Unscored —
    CVE-2002-1068

    The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large H…

  • Unscored —
    CVE-2002-1078

    Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large …

  • Unscored —
    CVE-2002-1064

    Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid …

  • Unscored —
    CVE-2002-1070 Public exploit

    Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to execute script as other P…

  • Unscored —
    CVE-2002-1022

    BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers…

  • Unscored —
    CVE-2002-1007 Public exploit

    Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the…

  • Unscored —
    CVE-2002-1037

    Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2002-1085

    Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote attackers to execute script a…