Overview 1,916 matches · 18 in Waratek scope · 1 protected · 5 exploited · 0 CISA KEV · 608 public PoC · 25 EPSS ≥ 0.5
1,916matches
18in Waratek scope0.9%
1protected0.1%
5exploited0.3%
0CISA KEV0.0%
608public PoC31.7%
25EPSS ≥ 0.51.3%
Protected by Waratek
1
0.1%
Rule in development
0
0.0%
Mitigation candidate
7
0.4%
No exploit published
10
0.5%
Outside Waratek scope
9
0.5%
Not applicable
1,889
98.6%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.1%
partly blocked
0
0.0%
not blocked
1,915
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
5
0.3%
Working exploit published
607
31.7%
Proof of concept only
0
0.0%
Forecast only
4
0.2%
No public exploit
1,300
67.8%
split by
peak 706 / year
19891
Not applicable1
Medium1
not blocked1
No public exploit1
19902
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
19914
Not applicable4
Medium4
not blocked4
No public exploit4
19920
19933
Not applicable3
Medium3
not blocked3
No public exploit3
199410
Not applicable10
Medium10
not blocked10
Working exploit published2
No public exploit8
19956
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
199621
Not applicable21
Medium21
not blocked21
Working exploit published5
No public exploit16
199789
Not applicable89
Medium89
not blocked89
Working exploit published18
No public exploit71
199885
Not applicable85
Medium85
not blocked85
Working exploit published11
No public exploit74
1999357
Outside Waratek scope1
Not applicable356
Medium357
not blocked357
Working exploit published119
No public exploit238
2000467
Mitigation candidate4
No exploit published3
Not applicable460
Medium467
not blocked467
Exploited2
Working exploit published195
No public exploit270
2001706
Mitigation candidate2
No exploit published4
Outside Waratek scope7
Not applicable693
Medium706
not blocked706
Exploited3
Working exploit published219
Forecast only2
No public exploit482
2002165
Protected by Waratek1
Mitigation candidate1
No exploit published3
Outside Waratek scope1
Not applicable159
Medium165
blocked by ARMR today1
not blocked164
Working exploit published35
Forecast only2
No public exploit128
1990199219941996199820002002
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-0381 | Medium | 2002-06-25 | Not applicable | No public exploit | The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address. |
| CVE-2002-0354 | Medium | 2002-06-25 | Not applicable | No public exploit | The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property. |
| CVE-2002-0353 | Medium | 2002-06-25 | Not applicable | No public exploit | The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, which causes Ethereal to allocate memory incorrectly, possibly due to zero-length fields. |
| CVE-2002-0352 | Medium | 2002-06-25 | Not applicable | No public exploit | Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication. |
| CVE-2002-0349 | Medium | 2002-06-25 | Not applicable | No public exploit | Tiny Personal Firewall (TPF) 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions. |
| CVE-2002-0347 | Medium | 2002-06-25 | Not applicable | No public exploit | Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request. |
| CVE-2002-0344 | Medium | 2002-06-25 | Not applicable | No public exploit | Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server. |
| CVE-2002-0343 | Medium | 2002-06-25 | Not applicable | No public exploit | Hotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the bookmarks file, which could allow local users with access to the bookmarks file to gain privileges by extracting the passwords. |
| CVE-2002-0342 | Medium | 2002-06-25 | Not applicable | No public exploit | Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is approximately 55 K long. |
| CVE-2002-0341 | Medium | 2002-06-25 | Not applicable | No public exploit | GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter. |
| CVE-2002-0339 | Medium | 2002-06-25 | Not applicable | No public exploit | Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length. |
| CVE-2002-0338 | Medium | 2002-06-25 | Not applicable | Working exploit published | The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) via an attachment whose name includes an MS-DOS device name. |
| CVE-2002-0337 | Medium | 2002-06-25 | Not applicable | No public exploit | RealPlayer 8 allows remote attackers to cause a denial of service (CPU utilization) via malformed .mp3 files. |
| CVE-2002-0333 | Medium | 2002-06-25 | Not applicable | Working exploit published | Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument. |
| CVE-2002-0331 | Medium | 2002-06-25 | Not applicable | Working exploit published | Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request. |
| CVE-2002-0325 | Medium | 2002-06-25 | Not applicable | Working exploit published | Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL. |
| CVE-2002-0323 | Medium | 2002-06-25 | Not applicable | No public exploit | comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by specifying the target file as an argument in the URL. |
| CVE-2002-0321 | Medium | 2002-06-25 | Not applicable | No public exploit | Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service (flooding) attacks. |
| CVE-2002-0318 | Medium | 2002-06-25 | Not applicable | No public exploit | FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption) via a flood of Access-Request packets. |
| CVE-2002-0314 | Medium | 2002-06-25 | Not applicable | No public exploit | fasttrack p2p, as used in (1) KaZaA before 1.5, (2) grokster, and (3) morpheus allows remote attackers to cause a denial of service (memory exhaustion) via a series of client-to-client messages, which pops up new windows per message. |
| CVE-2002-0312 | Medium | 2002-06-25 | Not applicable | No public exploit | Directory traversal vulnerability in Essentia Web Server 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL. |
| CVE-2002-0146 | Medium | 2002-06-25 | Not applicable | No public exploit | fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array. |
| CVE-2001-1300 | Medium | 2002-06-25 | Not applicable | No public exploit | Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD (CWD) command. |
| CVE-2002-0614 | Medium | 2002-06-18 | Not applicable | No public exploit | PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows remote attackers to obtain sensitive information, including database credentials, if .inc files are not preprocessed by the server. |
| CVE-2002-0611 | Medium | 2002-06-18 | Not applicable | Working exploit published | Directory traversal vulnerability in FileSeek.cgi allows remote attackers to read arbitrary files via a ....// (modified dot dot) in the (1) head or (2) foot parameters, which are not properly filtered. |
| CVE-2002-0609 | Medium | 2002-06-18 | Not applicable | No public exploit | Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service (system failure with "SA1457 out of i_port_timeout.fix_up_message_frame") via malformed IP packets. |
| CVE-2002-0604 | Medium | 2002-06-18 | Not applicable | No public exploit | Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service (crash) via a large number of packets with malformed IP options. |
| CVE-2002-0603 | Medium | 2002-06-18 | Not applicable | No public exploit | Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service (IPSEC crash) via a zero length packet to UDP port 500. |
| CVE-2002-0602 | Medium | 2002-06-18 | Not applicable | No public exploit | Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service (crash) via a large number of connections to (1) the HTTP web management port, or (2) the PPTP port. |
| CVE-2002-0601 | Medium | 2002-06-18 | Not applicable | No public exploit | ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service (crash) via malformed DHCP packets that cause RealSecure to dereference a null pointer. |
| CVE-2002-0597 | Medium | 2002-06-18 | Not applicable | Working exploit published | LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445. |
| CVE-2002-0596 | Medium | 2002-06-18 | Not applicable | No public exploit | WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message. |
| CVE-2002-0594 | Medium | 2002-06-18 | Not applicable | No public exploit | Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect. |
| CVE-2002-0591 | Medium | 2002-06-18 | Not applicable | Working exploit published | Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename. |
| CVE-2002-0588 | Medium | 2002-06-18 | Not applicable | Working exploit published | PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to (1) add.php or (2) del.php. |
| CVE-2002-0585 | Medium | 2002-06-18 | Not applicable | No public exploit | Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service. |
| CVE-2002-0584 | Medium | 2002-06-18 | Not applicable | No public exploit | WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily guessable because it is incremented by 1 for each new timesheet. |
| CVE-2002-0583 | Medium | 2002-06-18 | Not applicable | No public exploit | WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp directory, which allows remote attackers to read the reports via a brute force attack. |
| CVE-2002-0582 | Medium | 2002-06-18 | Not applicable | No public exploit | WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read the reports by accessing the directory. |
| CVE-2002-0576 | Medium | 2002-06-18 | Not applicable | No public exploit | ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message. |
| CVE-2002-0404 | Medium | 2002-06-18 | Not applicable | No public exploit | Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (memory consumption). |
| CVE-2002-0403 | Medium | 2002-06-18 | Not applicable | No public exploit | DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet that causes Ethereal to enter an infinite loop. |
| CVE-2002-0400 | Medium | 2002-06-18 | Not applicable | No public exploit | ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype. |
| CVE-2002-0368 | Medium | 2002-06-18 | Not applicable | No public exploit | The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources." |
| CVE-2002-0309 | Medium | 2002-05-31 | Not applicable | No public exploit | SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which could allow remote attackers to determine certain firewall configuration information. |
| CVE-2002-0305 | Medium | 2002-05-31 | Not applicable | No public exploit | Zero One Tech (ZOT) P100s print server does not properly disable the SNMP service or change the default password, which could leave the server open to attack without the administrator's knowledge. |
| CVE-2002-0304 | Medium | 2002-05-31 | Not applicable | No public exploit | Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request. |
| CVE-2002-0303 | Medium | 2002-05-31 | Not applicable | No public exploit | GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a password. |
| CVE-2002-0302 | Medium | 2002-05-31 | Not applicable | No public exploit | The Notify daemon for Symantec Enterprise Firewall (SEF) 6.5.x drops large alerts when SNMP is used as the transport, which could prevent some alerts from being sent in the event of an attack. |
| CVE-2002-0301 | Medium | 2002-05-31 | Not applicable | No public exploit | Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_USER and NFUSE_PASSWORD parameters. |
| CVE-2002-0300 | Medium | 2002-05-31 | Not applicable | Working exploit published | gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file. |
| CVE-2002-0298 | Medium | 2002-05-31 | Not applicable | No public exploit | ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET requests containing (1) a %2e%2e (encoded dot-dot), (2) several /../ (dot dot) sequences, (3) a missing URI, or (4) several ../ in a URI that does not begin with a / (slash) character. |
| CVE-2002-0297 | Medium | 2002-05-31 | Not applicable | No public exploit | Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request. |
| CVE-2002-0295 | Medium | 2002-05-31 | Not applicable | No public exploit | Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain privileges. |
| CVE-2002-0293 | Medium | 2002-05-31 | Not applicable | No public exploit | FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file. |
| CVE-2002-0291 | Medium | 2002-05-31 | Not applicable | No public exploit | Dino's Webserver 1.2 allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via several large HTTP requests within a short time. |
| CVE-2002-0289 | Medium | 2002-05-31 | Not applicable | Working exploit published | Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP request. |
| CVE-2002-0288 | Medium | 2002-05-31 | Not applicable | Working exploit published | Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (triple dot dot) in the HTTP request. |
| CVE-2002-0283 | Medium | 2002-05-31 | Not applicable | No public exploit | Windows XP with port 445 open allows remote attackers to cause a denial of service (CPU consumption) via a flood of TCP SYN packets containing possibly malformed data. |
| CVE-2002-0282 | Medium | 2002-05-31 | Not applicable | No public exploit | DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct request to add_user.php, or via an invalid new_language parameter in (2) contents.php, (3) categories.php, or (4) files.php, which leaks the path in an error message. |
| CVE-2002-0281 | Medium | 2002-05-31 | Not applicable | No public exploit | Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in the job information field to user_update.php. |
| CVE-2002-0279 | Medium | 2002-05-31 | Not applicable | No public exploit | The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service (kernel panic) and possibly gain privileges. |
| CVE-2002-0275 | Medium | 2002-05-31 | Not applicable | No public exploit | Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted files via an extra / (slash) in the requested URL. |
| CVE-2002-0274 | Medium | 2002-05-31 | Not applicable | No public exploit | Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C (configuration file) and other command line arguments. |
| CVE-2002-0273 | Medium | 2002-05-31 | Not applicable | No public exploit | Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter. |
| CVE-2002-0375 | Medium | 2002-05-29 | Not applicable | Working exploit published | Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript via a URL with the script in the HTNAME parameter. |
| CVE-2002-0270 | Medium | 2002-05-29 | Not applicable | No public exploit | Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks. |
| CVE-2002-0266 | Medium | 2002-05-29 | Not applicable | Working exploit published | Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonexistent file, which generates an error message that includes the full pathname. |
| CVE-2002-0265 | Medium | 2002-05-29 | Not applicable | Working exploit published | Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file. |
| CVE-2002-0262 | Medium | 2002-05-29 | Not applicable | No public exploit | Directory traversal vulnerability in netget for Sybex E-Trainer web server allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. |
| CVE-2002-0259 | Medium | 2002-05-29 | Not applicable | No public exploit | InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in (1) .pwd files in the miniportal/apache directory, or (2) mplog.txt, which could allow local users to gain privileges. |
| CVE-2002-0256 | Medium | 2002-05-29 | Not applicable | Working exploit published | The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of connections with long strings, which causes a large number of login failures and causes the telnet service to stop. |
| CVE-2002-0254 | Medium | 2002-05-29 | Not applicable | No public exploit | ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that contains large height and width values, which causes the crash when viewed in Userdetails. |
| CVE-2002-0253 | Medium | 2002-05-29 | Not applicable | No public exploit | PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers to obtain the physical path for an include file via a trailing slash in a request to a directly accessible PHP program, which modifies the base path, causes the include directive to fail, and produces an error message that contains the path. |
| CVE-2002-0249 | Medium | 2002-05-29 | Not applicable | No public exploit | PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message. |
| CVE-2002-0240 | Medium | 2002-05-29 | Not applicable | No public exploit | PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message. |
| CVE-2002-0233 | Medium | 2002-05-29 | Not applicable | No public exploit | Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request. |
| CVE-2002-0232 | Medium | 2002-05-29 | Not applicable | No public exploit | Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the cfg parameter for (1) 14all.cgi, (2) 14all-1.1.cgi, (3) traffic.cgi, or (4) mrtg.cgi. |
| CVE-2002-0191 | Medium | 2002-05-29 | Not applicable | Working exploit published | Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" character via script containing the cssText property of the stylesheet object, aka "Local Information Disclosure through HTML Object" vulnerability. |
| CVE-2002-0169 | Medium | 2002-05-29 | Not applicable | No public exploit | The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier. |
| CVE-2001-1340 | Medium | 2002-05-21 | Not applicable | No public exploit | Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service. |
| CVE-2001-1334 | Medium | 2002-05-19 | Not applicable | Working exploit published | Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as the source URL. |
| CVE-2002-1280 | Medium | 2002-05-17 | Not applicable | No public exploit | Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service (memory consumption and crash). |
| CVE-2002-0230 | Medium | 2002-05-16 | Not applicable | Working exploit published | Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message. |
| CVE-2002-0228 | Medium | 2002-05-16 | Not applicable | No public exploit | Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites). |
| CVE-2002-0227 | Medium | 2002-05-16 | Not applicable | Working exploit published | KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message. |
| CVE-2002-0225 | Medium | 2002-05-16 | Not applicable | No public exploit | tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files. |
| CVE-2002-0224 | Medium | 2002-05-16 | Not applicable | No public exploit | The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input. |
| CVE-2002-0221 | Medium | 2002-05-16 | Not applicable | No public exploit | Etype Eserv 2.97 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV. |
| CVE-2002-0216 | Medium | 2002-05-16 | Not applicable | No public exploit | userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter. |
| CVE-2002-0215 | Medium | 2002-05-16 | Not applicable | Working exploit published | Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message. |
| CVE-2002-0211 | Medium | 2002-05-16 | Not applicable | Working exploit published | Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed. |
| CVE-2002-0209 | Medium | 2002-05-16 | Not applicable | Working exploit published | Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the address to the virtual IP address. |
| CVE-2002-0208 | Medium | 2002-05-16 | Not applicable | No public exploit | PGP Security PGPfire 7.1 for Windows alters the system's TCP/IP stack and modifies packets in ICMP error messages in a way that allows remote attackers to determine that the system is running PGPfire. |
| CVE-2002-0203 | Medium | 2002-05-16 | Not applicable | No public exploit | ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter. |
| CVE-2002-0201 | Medium | 2002-05-16 | Not applicable | Working exploit published | Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow. |
| CVE-2002-0200 | Medium | 2002-05-16 | Not applicable | No public exploit | Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name. |
| CVE-2002-0196 | Medium | 2002-05-16 | Not applicable | No public exploit | GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root. |
| CVE-2002-0157 | Medium | 2002-05-16 | Not applicable | No public exploit | Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file. |
| CVE-2002-1592 | Medium | 2002-05-06 | Not applicable | No public exploit | The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information. |