Overview 3,555 matches · 30 in Waratek scope · 2 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
3,555matches
30in Waratek scope0.8%
2protected0.1%
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
2
0.1%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
28
0.8%
Outside Waratek scope
15
0.4%
Not applicable
3,473
97.7%
Withdrawn CVE
37
1.0%
blocked by ARMR today
2
0.1%
partly blocked
0
0.0%
not blocked
3,553
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
3,555
100.0%
split by
peak 1,183 / year
19881
Not applicable1
High1
not blocked1
No public exploit1
19893
Not applicable3
High2
Medium1
not blocked3
No public exploit3
199010
Not applicable10
High8
Medium1
Low1
not blocked10
No public exploit10
199113
Not applicable13
High9
Medium4
not blocked13
No public exploit13
199214
Not applicable13
Withdrawn CVE1
High12
Low1
Unknown1
not blocked14
No public exploit14
199313
Not applicable13
High8
Medium3
Low2
not blocked13
No public exploit13
199420
Not applicable19
Withdrawn CVE1
High11
Medium8
Unknown1
not blocked20
No public exploit20
199520
Not applicable20
High15
Medium4
Low1
not blocked20
No public exploit20
199656
No exploit published1
Not applicable55
Critical1
High30
Medium16
Low9
not blocked56
No public exploit56
1997176
Not applicable175
Withdrawn CVE1
Critical1
High90
Medium71
Low13
Unknown1
not blocked176
No public exploit176
1998196
Not applicable195
Withdrawn CVE1
High103
Medium74
Low18
Unknown1
not blocked196
No public exploit196
1999639
No exploit published2
Not applicable609
Withdrawn CVE28
Critical1
High289
Medium238
Low83
Unknown28
not blocked639
No public exploit639
2000587
No exploit published6
Not applicable580
Withdrawn CVE1
Critical1
High253
Medium270
Low62
Unknown1
not blocked587
No public exploit587
20011,183
Protected by Waratek1
No exploit published10
Outside Waratek scope10
Not applicable1,159
Withdrawn CVE3
Critical8
High546
Medium482
Low144
Unknown3
blocked by ARMR today1
not blocked1,182
No public exploit1,183
2002624
Protected by Waratek1
No exploit published9
Outside Waratek scope5
Not applicable608
Withdrawn CVE1
Critical3
High344
Medium233
Low43
Unknown1
blocked by ARMR today1
not blocked623
No public exploit624
19881990199219941996199820002002
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-1608 | Medium | 2002-08-31 | Not applicable | No public exploit | Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code. |
| CVE-2002-1607 | Medium | 2002-08-31 | Not applicable | No public exploit | Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code. |
| CVE-2002-1611 | Medium | 2002-08-30 | Not applicable | No public exploit | Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges. |
| CVE-2002-1610 | Low | 2002-08-30 | Not applicable | No public exploit | Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service. |
| CVE-2002-1609 | Medium | 2002-08-30 | Not applicable | No public exploit | Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges. |
| CVE-2002-1606 | Medium | 2002-08-30 | Not applicable | No public exploit | Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm. |
| CVE-2002-1353 | Medium | 2002-08-29 | Not applicable | No public exploit | LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst. |
| CVE-2002-0849 | Medium | 2002-08-12 | Not applicable | No public exploit | Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password. |
| CVE-2002-0848 | Medium | 2002-08-12 | Not applicable | No public exploit | Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing. |
| CVE-2002-0847 | High | 2002-08-12 | Not applicable | No public exploit | tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free). |
| CVE-2002-0846 | High | 2002-08-12 | Not applicable | No public exploit | The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length. |
| CVE-2002-0845 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding. |
| CVE-2002-0844 | High | 2002-08-12 | Not applicable | No public exploit | Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code. |
| CVE-2002-0832 | High | 2002-08-12 | Not applicable | No public exploit | Internet Explorer 5, 5.6, and 6 allows remote attackers to bypass cookie privacy settings and store information across browser sessions via the userData (storeuserData) feature. |
| CVE-2002-0831 | Low | 2002-08-12 | Not applicable | No public exploit | The kqueue mechanism in FreeBSD 4.3 through 4.6 STABLE allows local users to cause a denial of service (kernel panic) via a pipe call in which one end is terminated and an EVFILT_WRITE filter is registered for the other end. |
| CVE-2002-0830 | Medium | 2002-08-12 | Not applicable | No public exploit | Network File System (NFS) in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service (hang) via an RPC message with a zero length payload, which causes NFS to reference a previous payload and enter an infinite loop. |
| CVE-2002-0829 | Medium | 2002-08-12 | Not applicable | No public exploit | Integer overflow in the Berkeley Fast File System (FFS) in FreeBSD 4.6.1 RELEASE-p4 and earlier allows local users to access arbitrary file contents within FFS to gain privileges by creating a file that is larger than allowed by the virtual memory system. |
| CVE-2002-0827 | High | 2002-08-12 | Not applicable | No public exploit | Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824. |
| CVE-2002-0826 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command. |
| CVE-2002-0825 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code. |
| CVE-2002-0822 | High | 2002-08-12 | Not applicable | No public exploit | Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the (1) SOCKS, (2) RSVP, (3) AFS, or (4) LMP dissectors, which can be caused to core dump. |
| CVE-2002-0821 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflows in Ethereal 0.9.4 and earlier allow remote attackers to cause a denial of service or execute arbitrary code via (1) the BGP dissector, or (2) the WCP dissector. |
| CVE-2002-0820 | High | 2002-08-12 | Not applicable | No public exploit | FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors reference procfs or linprocfs, which could allow local users to reuse the file descriptors in a setuid or setgid program to modify critical data and gain privileges. |
| CVE-2002-0819 | High | 2002-08-12 | Not applicable | No public exploit | Format string vulnerability in artsd, when called by artswrapper, allows local users to gain privileges via format strings in the -a argument, which results in an error message that is not properly handled in a call to the arts_fatal function. |
| CVE-2002-0818 | High | 2002-08-12 | Not applicable | No public exploit | wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value. |
| CVE-2002-0816 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and argument. |
| CVE-2002-0815 | High | 2002-08-12 | Not applicable | No public exploit | The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content from restricted sites by mapping the malicious server's parent DNS domain name to the restricted site, loading a page from the restricted site into one frame, and passing the information to the attacker-controlled frame, which is allowed because the document.domain of the two frames matches on the parent domain. |
| CVE-2002-0811 | High | 2002-08-12 | Not applicable | No public exploit | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via a SQL injection attack on the sort order parameter to buglist.cgi. |
| CVE-2002-0810 | Medium | 2002-08-12 | Not applicable | No public exploit | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails. |
| CVE-2002-0809 | High | 2002-08-12 | Not applicable | No public exploit | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generated by some browsers, which could cause certain fields to appear to be unset, which has the effect of removing group permissions on bugs when buglist.cgi is provided with the encoded field names. |
| CVE-2002-0808 | High | 2002-08-12 | Not applicable | No public exploit | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset permissions to be assigned to some bugs. |
| CVE-2002-0807 | High | 2002-08-12 | Not applicable | No public exploit | Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name (real name) field, which is not properly quoted by editusers.cgi. |
| CVE-2002-0806 | Low | 2002-08-12 | Not applicable | No public exploit | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other users by directly calling the editusers.cgi script with the "del" option. |
| CVE-2002-0805 | Medium | 2002-08-12 | Not applicable | No public exploit | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writable permissions, and (2) creates the params file with world-writable permissions, which allows local users to modify the files and execute code. |
| CVE-2002-0804 | High | 2002-08-12 | Not applicable | No public exploit | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname. |
| CVE-2002-0803 | Medium | 2002-08-12 | Not applicable | No public exploit | Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi. |
| CVE-2002-0802 | High | 2002-08-12 | Not applicable | No public exploit | The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks. |
| CVE-2002-0801 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file. |
| CVE-2002-0800 | Medium | 2002-08-12 | Not applicable | No public exploit | BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end. |
| CVE-2002-0798 | Low | 2002-08-12 | Not applicable | No public exploit | Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which reportedly can be used to cause a denial of service. |
| CVE-2002-0797 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges. |
| CVE-2002-0796 | High | 2002-08-12 | Not applicable | No public exploit | Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges. |
| CVE-2002-0795 | Low | 2002-08-12 | Not applicable | No public exploit | The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files. |
| CVE-2002-0794 | Medium | 2002-08-12 | Not applicable | No public exploit | The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows remote attackers to cause a denial of service (network service availability) via a large number of connection attempts, which fills the queue. |
| CVE-2002-0792 | Medium | 2002-08-12 | Not applicable | No public exploit | The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XML data. |
| CVE-2002-0791 | Medium | 2002-08-12 | Not applicable | No public exploit | Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length. |
| CVE-2002-0790 | Low | 2002-08-12 | Not applicable | No public exploit | clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges. |
| CVE-2002-0789 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter. |
| CVE-2002-0788 | Medium | 2002-08-12 | Not applicable | No public exploit | An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information. |
| CVE-2002-0785 | Medium | 2002-08-12 | Not applicable | No public exploit | AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow. |
| CVE-2002-0784 | Medium | 2002-08-12 | Not applicable | No public exploit | Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot). |
| CVE-2002-0782 | Medium | 2002-08-12 | Not applicable | No public exploit | Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a large number of connection requests to hosts that do not have a specific route, which may be forwarded to the public interface. |
| CVE-2002-0781 | Medium | 2002-08-12 | Not applicable | No public exploit | RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which causes proxy.nlm to ABEND. |
| CVE-2002-0780 | Medium | 2002-08-12 | Not applicable | No public exploit | IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of random data, which causes ipipxgw.nlm to ABEND. |
| CVE-2002-0779 | Medium | 2002-08-12 | Not applicable | No public exploit | FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 21 with a large amount of random data. |
| CVE-2002-0778 | High | 2002-08-12 | Not applicable | No public exploit | The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP. |
| CVE-2002-0777 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter. |
| CVE-2002-0776 | High | 2002-08-12 | Not applicable | No public exploit | getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix. |
| CVE-2002-0774 | High | 2002-08-12 | Not applicable | No public exploit | Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed. |
| CVE-2002-0768 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command. |
| CVE-2002-0766 | High | 2002-08-12 | Not applicable | No public exploit | OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor table and closing file descriptors 0, 1, or 2 before executing a privileged process, which is not properly handled when OpenBSD fails to open an alternate descriptor. |
| CVE-2002-0765 | High | 2002-08-12 | Not applicable | No public exploit | sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users to successfully authenticate and log in with another user's password. |
| CVE-2002-0763 | High | 2002-08-12 | Not applicable | No public exploit | Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server. |
| CVE-2002-0762 | High | 2002-08-12 | Not applicable | No public exploit | shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before calling programs that modify the files. |
| CVE-2002-0761 | Low | 2002-08-12 | Not applicable | No public exploit | bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could cause the files to be extracted with less restrictive permissions than intended. |
| CVE-2002-0760 | Low | 2002-08-12 | Not applicable | No public exploit | Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local users to read the files as they are being decompressed. |
| CVE-2002-0759 | Medium | 2002-08-12 | Not applicable | No public exploit | bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the user if an existing file would be overwritten, which could allow attackers to overwrite files via a bzip2 archive. |
| CVE-2002-0758 | High | 2002-08-12 | Not applicable | No public exploit | ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file. |
| CVE-2002-0757 | High | 2002-08-12 | Not applicable | No public exploit | (1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authentication information, which can force Webmin or Usermin to accept arbitrary username/session ID combinations. |
| CVE-2002-0756 | High | 2002-08-12 | Not applicable | No public exploit | Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies. |
| CVE-2002-0755 | High | 2002-08-12 | Not applicable | No public exploit | Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, which could allow unauthorized users to execute commands as root. |
| CVE-2002-0754 | High | 2002-08-12 | Not applicable | No public exploit | Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them. |
| CVE-2002-0753 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie. |
| CVE-2002-0752 | Medium | 2002-08-12 | Not applicable | No public exploit | CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing the file. |
| CVE-2002-0751 | High | 2002-08-12 | Not applicable | No public exploit | CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (1) form-to, (2) form-from, and (3) form-results parameters. |
| CVE-2002-0750 | Medium | 2002-08-12 | Not applicable | No public exploit | CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field. |
| CVE-2002-0746 | High | 2002-08-12 | Not applicable | No public exploit | Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument. |
| CVE-2002-0745 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in uucp in AIX 4.3.3. |
| CVE-2002-0744 | High | 2002-08-12 | Not applicable | No public exploit | namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow. |
| CVE-2002-0743 | High | 2002-08-12 | Not applicable | No public exploit | mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow. |
| CVE-2002-0742 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in pioout on AIX 4.3.3. |
| CVE-2002-0739 | High | 2002-08-12 | Not applicable | No public exploit | Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page. |
| CVE-2002-0738 | High | 2002-08-12 | Not applicable | No public exploit | MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by (1) splitting the SCRIPT tag into smaller pieces, (2) including the script in a SRC argument to an IMG tag, or (3) using "&={script}" syntax. |
| CVE-2002-0736 | High | 2002-08-12 | Not applicable | No public exploit | Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank. |
| CVE-2002-0735 | High | 2002-08-12 | Not applicable | No public exploit | Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages. |
| CVE-2002-0729 | Medium | 2002-08-12 | Not applicable | No public exploit | Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator. |
| CVE-2002-0728 | Medium | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of service (crash) via a PNG data stream that has more IDAT data than indicated by the IHDR chunk. |
| CVE-2002-0719 | High | 2002-08-12 | Not applicable | No public exploit | SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files. |
| CVE-2002-0718 | High | 2002-08-12 | Not applicable | No public exploit | Web authoring command in Microsoft Content Management Server (MCMS) 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function." |
| CVE-2002-0710 | Medium | 2002-08-12 | Not applicable | No public exploit | Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by specifying the desired files in the BlurbFilePath parameter. |
| CVE-2002-0700 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise." |
| CVE-2002-0698 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an EHLO request from a system with a long name as obtained through a reverse DNS lookup, which triggers the overflow in IMC's hello response. |
| CVE-2002-0697 | High | 2002-08-12 | Not applicable | No public exploit | Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials. |
| CVE-2002-0695 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command. |
| CVE-2002-0684 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr. |
| CVE-2002-0660 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other operating systems, may allow attackers to cause a denial of service and possibly execute arbitrary code, a different vulnerability than CVE-2002-0728. |
| CVE-2002-0657 | High | 2002-08-12 | Not applicable | No public exploit | Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key. |
| CVE-2002-0655 | High | 2002-08-12 | Outside Waratek scope | No public exploit | OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code. |
| CVE-2002-0650 | Medium | 2002-08-12 | Not applicable | No public exploit | The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "ping" style packet to the Resolution Service (UDP port 1434) with a spoofed IP address of another SQL Server system, which causes the two servers to exchange packets in an infinite loop. |
| CVE-2002-0645 | High | 2002-08-12 | Not applicable | No public exploit | SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands. |