Skip to content
OpenAdvisories

Archive

September 2002

Vulnerabilities first published in this month (UTC), newest first.

← August 2002 2002 / September October 2002 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 1011
  11. 11 
  12. 121
  13. 13 
  14. 141
  15. 15 
  16. 16 
  17. 172
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 246
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2002-1129 Public exploit

    Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.

  • Unscored —
    CVE-2002-1131 Public exploit EPSS 26%

    Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as oth…

  • Unscored —
    CVE-2002-1128

    Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long M…

  • Unscored —
    CVE-2002-1133

    Encoded directory traversal vulnerability in Dino's web server 2.1 allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2002-1134

    Unknown vulnerability in Compaq WEBES Service Tools 2.0 through WEBES 4.0 (Service Pack 5) allows local users to read p…

  • Unscored —
    CVE-2002-1127

    Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) co…

  • Unscored —
    CVE-2002-1124

    Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables.

    purity Debian
  • Unscored —
    CVE-2002-1125 Public exploit

    FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubble…

  • Unscored —
    CVE-2002-1121

    SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall befor…

  • Unscored —
    CVE-2002-1120 Public exploit EPSS 67%

    Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP …

  • Unscored —
    CVE-2002-0837

    wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to (1) execute arbitrary code or (2)…

  • Unscored —
    CVE-2002-0664

    The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users …

  • Unscored —
    CVE-2002-0862 Public exploit EPSS 16%

    The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI…

  • Unscored —
    CVE-2002-1090

    Buffer overflow in read_smtp_response of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to (1) execut…

    libesmtp Debian
  • Unscored —
    CVE-2002-1110

    Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, all…

  • Unscored —
    CVE-2002-1115

    Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the f_id bug ID parameter to (1) b…

  • Unscored —
    CVE-2002-1114

    config_inc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read arbitrary files via t…

  • Unscored —
    CVE-2002-1103

    Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2002-1101 Public exploit

    Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2002-1100

    Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service (crash) v…

  • Unscored —
    CVE-2002-1094

    Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentia…