Overview 2,159 matches · 17 in Waratek scope · 1 protected · 20 exploited · 0 CISA KEV · 693 public PoC · 46 EPSS ≥ 0.5
2,159matches
17in Waratek scope0.8%
1protected0.0%
20exploited0.9%
0CISA KEV0.0%
693public PoC32.1%
46EPSS ≥ 0.52.1%
Protected by Waratek
1
0.0%
Rule in development
0
0.0%
Mitigation candidate
2
0.1%
No exploit published
14
0.6%
Outside Waratek scope
8
0.4%
Not applicable
2,134
98.8%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.0%
partly blocked
0
0.0%
not blocked
2,158
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
20
0.9%
Working exploit published
676
31.3%
Proof of concept only
0
0.0%
Forecast only
5
0.2%
No public exploit
1,458
67.5%
split by
peak 776 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19892
Not applicable2
High2
not blocked2
No public exploit2
19908
Not applicable8
High8
not blocked8
No public exploit8
199111
Not applicable11
High11
not blocked11
Working exploit published2
No public exploit9
199212
Not applicable12
High12
not blocked12
No public exploit12
19938
Not applicable8
High8
not blocked8
No public exploit8
199414
Not applicable14
High14
not blocked14
Working exploit published3
No public exploit11
199517
Not applicable17
High17
not blocked17
Working exploit published2
No public exploit15
199643
No exploit published1
Not applicable42
High43
not blocked43
Working exploit published12
Forecast only1
No public exploit30
1997143
Not applicable143
High143
not blocked143
Exploited2
Working exploit published51
No public exploit90
1998137
Not applicable137
High137
not blocked137
Exploited1
Working exploit published33
No public exploit103
1999423
No exploit published2
Not applicable421
High423
not blocked423
Exploited2
Working exploit published132
No public exploit289
2000454
Mitigation candidate2
No exploit published3
Outside Waratek scope2
Not applicable447
High454
not blocked454
Exploited3
Working exploit published197
Forecast only1
No public exploit253
2001776
Protected by Waratek1
No exploit published6
Outside Waratek scope5
Not applicable764
High776
blocked by ARMR today1
not blocked775
Exploited11
Working exploit published219
No public exploit546
2002109
No exploit published2
Outside Waratek scope1
Not applicable106
High109
not blocked109
Exploited1
Working exploit published24
Forecast only3
No public exploit81
19881990199219941996199820002002
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-1621 | High | 2002-04-22 | Not applicable | No public exploit | Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code. |
| CVE-2002-0181 | High | 2002-04-22 | Not applicable | No public exploit | Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parameter. |
| CVE-2002-0180 | High | 2002-04-22 | Not applicable | No public exploit | Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by connecting to the monitored web server from an IP address that resolves to a long hostname. |
| CVE-2002-0179 | High | 2002-04-22 | Not applicable | No public exploit | Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute arbitrary code. |
| CVE-2002-0177 | High | 2002-04-22 | Not applicable | Working exploit published | Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client. |
| CVE-2002-0170 | High | 2002-04-22 | Not applicable | No public exploit | Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration. |
| CVE-2002-0168 | High | 2002-04-22 | Not applicable | No public exploit | Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption. |
| CVE-2002-0167 | High | 2002-04-22 | Not applicable | No public exploit | Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain weaknesses of NetPBM. |
| CVE-2002-0166 | High | 2002-04-22 | Not applicable | No public exploit | Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display. |
| CVE-2002-0159 | High | 2002-04-22 | Not applicable | No public exploit | Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash the CSADMIN module only (denial of service of administration function) or execute arbitrary code via format strings in the URL to port 2002. |
| CVE-2002-0153 | High | 2002-04-22 | Not applicable | Working exploit published | Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the "Local Applescript Invocation" vulnerability. |
| CVE-2002-0152 | High | 2002-04-22 | Not applicable | No public exploit | Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh. |
| CVE-2002-0150 | High | 2002-04-22 | Not applicable | Forecast only | Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values. |
| CVE-2002-0149 | High | 2002-04-22 | Not applicable | Forecast only | Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names. |
| CVE-2002-0148 | High | 2002-04-22 | Not applicable | Working exploit published | Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page. |
| CVE-2002-0147 | High | 2002-04-22 | Not applicable | Forecast only | Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun." |
| CVE-2002-0079 | High | 2002-04-22 | Not applicable | Working exploit published | Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code. |
| CVE-2002-0075 | High | 2002-04-22 | Not applicable | No public exploit | Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message. |
| CVE-2002-0074 | High | 2002-04-22 | Not applicable | No public exploit | Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session. |
| CVE-2002-0071 | High | 2002-04-22 | Not applicable | No public exploit | Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names. |
| CVE-2002-0066 | High | 2002-04-22 | Not applicable | No public exploit | Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges. |
| CVE-2002-0065 | High | 2002-04-22 | Not applicable | No public exploit | Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry. |
| CVE-2002-0064 | High | 2002-04-22 | Not applicable | No public exploit | Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system. |
| CVE-2002-0037 | High | 2002-04-22 | Not applicable | No public exploit | Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object. |
| CVE-2002-1591 | High | 2002-04-08 | Not applicable | No public exploit | AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions. |
| CVE-2002-0151 | High | 2002-04-04 | Not applicable | No public exploit | Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request. |
| CVE-2002-0051 | High | 2002-04-04 | Not applicable | No public exploit | Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. |
| CVE-2002-0165 | High | 2002-04-03 | Not applicable | No public exploit | LogWatch 2.5 allows local users to gain root privileges via a symlink attack, a different vulnerability than CVE-2002-0162. |
| CVE-2002-0017 | High | 2002-04-03 | Not applicable | No public exploit | Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request. |
| CVE-2002-0158 | High | 2002-04-02 | Not applicable | Working exploit published | Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument. |
| CVE-2002-1639 | High | 2002-04-01 | No exploit published | No public exploit | Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host". |
| CVE-2001-1175 | High | 2002-04-01 | Not applicable | No public exploit | vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing. |
| CVE-2001-1174 | High | 2002-04-01 | Not applicable | No public exploit | Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header. |
| CVE-2001-1171 | High | 2002-04-01 | Not applicable | No public exploit | Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy. |
| CVE-2002-0078 | High | 2002-03-29 | Not applicable | No public exploit | The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability. |
| CVE-2002-0163 | High | 2002-03-26 | Not applicable | Working exploit published | Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses. |
| CVE-2002-0145 | High | 2002-03-25 | Not applicable | No public exploit | chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files owned by other users, such as root. |
| CVE-2002-0144 | High | 2002-03-25 | Not applicable | No public exploit | Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload directory via a .. (dot dot) attack. |
| CVE-2002-0142 | High | 2002-03-25 | Not applicable | Working exploit published | CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long and ends in a series of . (dot) characters. |
| CVE-2002-0140 | High | 2002-03-25 | Not applicable | Working exploit published | Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions. |
| CVE-2002-0139 | High | 2002-03-25 | Not applicable | No public exploit | Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command. |
| CVE-2002-0137 | High | 2002-03-25 | Not applicable | Working exploit published | CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file. |
| CVE-2002-0134 | High | 2002-03-25 | Not applicable | No public exploit | Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command. |
| CVE-2002-0133 | High | 2002-03-25 | Not applicable | No public exploit | Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string to the telnet proxy. |
| CVE-2002-0132 | High | 2002-03-25 | Not applicable | Working exploit published | Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable. |
| CVE-2002-0130 | High | 2002-03-25 | Not applicable | No public exploit | Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument. |
| CVE-2002-0128 | High | 2002-03-25 | Not applicable | Working exploit published | cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long argument. |
| CVE-2002-0126 | High | 2002-03-25 | Not applicable | Exploited | Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD. |
| CVE-2002-0125 | High | 2002-03-25 | Not applicable | No public exploit | Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as (1) Super Methane Brothers, (2) Star War, (3) Kwirk, (4) Clankanoid, and others, via a long HOME environment variable. |
| CVE-2002-0123 | High | 2002-03-25 | Not applicable | No public exploit | MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request. |
| CVE-2002-0118 | High | 2002-03-25 | Not applicable | Working exploit published | Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag. |
| CVE-2002-0117 | High | 2002-03-25 | Not applicable | Working exploit published | Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag. |
| CVE-2002-0111 | High | 2002-03-25 | Not applicable | No public exploit | Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL. |
| CVE-2002-0108 | High | 2002-03-25 | Not applicable | No public exploit | Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address. |
| CVE-2002-0105 | High | 2002-03-25 | Not applicable | No public exploit | CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable. |
| CVE-2002-0100 | High | 2002-03-25 | Not applicable | No public exploit | AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file. |
| CVE-2002-0098 | High | 2002-03-25 | Not applicable | Working exploit published | Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner. |
| CVE-2002-0097 | High | 2002-03-25 | Not applicable | No public exploit | Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account. |
| CVE-2002-0096 | High | 2002-03-25 | Not applicable | No public exploit | The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could provide that user with administrative privileges that were not intended. |
| CVE-2002-0095 | High | 2002-03-25 | Not applicable | Working exploit published | The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed. |
| CVE-2002-0094 | High | 2002-03-25 | Not applicable | No public exploit | config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion. |
| CVE-2002-0061 | High | 2002-03-21 | Not applicable | Working exploit published | Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe. |
| CVE-2002-0076 | High | 2002-03-19 | Outside Waratek scope | No public exploit | Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the "Virtual Machine Verifier" vulnerability. |
| CVE-2002-0091 | High | 2002-03-15 | Not applicable | No public exploit | Multiple CGI scripts in CIDER SHADOW 1.5 and 1.6 allows remote attackers to execute arbitrary commands via certain form fields. |
| CVE-2002-0090 | High | 2002-03-15 | Not applicable | No public exploit | Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option. |
| CVE-2002-0089 | High | 2002-03-15 | Not applicable | No public exploit | Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file. |
| CVE-2002-0088 | High | 2002-03-15 | Not applicable | No public exploit | Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path. |
| CVE-2002-0086 | High | 2002-03-15 | Not applicable | No public exploit | Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable. |
| CVE-2002-0084 | High | 2002-03-15 | Not applicable | No public exploit | Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument. |
| CVE-2002-0082 | High | 2002-03-15 | Not applicable | Working exploit published | The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session. |
| CVE-2002-0070 | High | 2002-03-15 | Not applicable | No public exploit | Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled. |
| CVE-2002-0081 | High | 2002-03-08 | Not applicable | No public exploit | Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when file_uploads is enabled. |
| CVE-2002-0068 | High | 2002-03-08 | Not applicable | Working exploit published | Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters. |
| CVE-2002-0067 | High | 2002-03-08 | Not applicable | No public exploit | Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions. |
| CVE-2002-0063 | High | 2002-03-08 | Not applicable | No public exploit | Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values. |
| CVE-2002-0062 | High | 2002-03-08 | Not applicable | No public exploit | Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling." |
| CVE-2002-0060 | High | 2002-03-08 | Not applicable | No public exploit | IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions. |
| CVE-2002-0056 | High | 2002-03-08 | Not applicable | No public exploit | Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in an ad hoc connection. |
| CVE-2002-0054 | High | 2002-03-08 | Not applicable | No public exploit | SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials. |
| CVE-2002-0053 | High | 2002-03-08 | Not applicable | No public exploit | Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request. NOTE: this candidate may be split or merged with other candidates. This and other PROTOS-related candidates, especially CVE-2002-0012 and CVE-2002-0013, will be updated when more accurate information is available. |
| CVE-2002-0050 | High | 2002-03-08 | Not applicable | No public exploit | Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data. |
| CVE-2002-0027 | High | 2002-03-08 | Not applicable | No public exploit | Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" vulnerability described in MS:MS01-058/CAN-2001-0874. |
| CVE-2002-0026 | High | 2002-03-08 | Not applicable | No public exploit | Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made. |
| CVE-2002-0024 | High | 2002-03-08 | Not applicable | No public exploit | File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-Type HTML header fields to modify how the name of the file is displayed, which could trick a user into believing that a file is safe to download. |
| CVE-2002-0022 | High | 2002-03-08 | Not applicable | No public exploit | Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated. |
| CVE-2002-0020 | High | 2002-03-08 | Not applicable | No public exploit | Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options. |
| CVE-2002-0018 | High | 2002-03-08 | Not applicable | No public exploit | In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain. |
| CVE-2001-1376 | High | 2002-03-04 | Not applicable | No public exploit | Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data. |
| CVE-2002-0048 | High | 2002-02-27 | Not applicable | Working exploit published | Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server. |
| CVE-2002-0028 | High | 2002-02-27 | Not applicable | No public exploit | Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a Voice Video & Games request. |
| CVE-2002-0004 | High | 2002-02-27 | Not applicable | Working exploit published | Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice. |
| CVE-2002-0003 | High | 2002-02-27 | Not applicable | No public exploit | Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system. |
| CVE-2002-0001 | High | 2002-02-27 | Not applicable | No public exploit | Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list. |
| CVE-2002-0013 | High | 2002-02-13 | Not applicable | Working exploit published | Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available. |
| CVE-2002-0012 | High | 2002-02-13 | Not applicable | No public exploit | Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available. |
| CVE-2001-1058 | High | 2002-02-13 | Not applicable | No public exploit | The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by the -restrict argument) and steal a license via a client request that includes the name of a host that is allowed to obtain the license. |
| CVE-2001-1371 | High | 2002-02-06 | No exploit published | No public exploit | The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager. |
| CVE-2002-0045 | High | 2002-01-31 | Not applicable | No public exploit | slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs. |
| CVE-2002-0043 | High | 2002-01-31 | Not applicable | Working exploit published | sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked. |
| CVE-2002-0010 | High | 2002-01-31 | Not applicable | No public exploit | Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via (1) the sql parameter in buglist.cgi, (2) invalid field names from the "boolean chart" query in buglist.cgi, (3) the mybugslink parameter in userprefs.cgi, (4) a malformed bug ID in the buglist parameter in long_list.cgi, and (5) the value parameter in editusers.cgi, which allows groupset privileges to be modified by attackers with blessgroupset privileges. |