Overview 2,221 matches · 25 in Waratek scope · 1 protected · 7 exploited · 0 CISA KEV · 688 public PoC · 28 EPSS ≥ 0.5
2,221matches
25in Waratek scope1.1%
1protected0.0%
7exploited0.3%
0CISA KEV0.0%
688public PoC31.0%
28EPSS ≥ 0.51.3%
Protected by Waratek
1
0.0%
Rule in development
0
0.0%
Mitigation candidate
9
0.4%
No exploit published
15
0.7%
Outside Waratek scope
12
0.5%
Not applicable
2,184
98.3%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.0%
partly blocked
0
0.0%
not blocked
2,220
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
7
0.3%
Working exploit published
687
30.9%
Proof of concept only
0
0.0%
Forecast only
5
0.2%
No public exploit
1,522
68.5%
split by
peak 706 / year
19891
Not applicable1
Medium1
not blocked1
No public exploit1
19902
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
19914
Not applicable4
Medium4
not blocked4
No public exploit4
19920
19933
Not applicable3
Medium3
not blocked3
No public exploit3
199410
Not applicable10
Medium10
not blocked10
Working exploit published2
No public exploit8
19956
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
199621
Not applicable21
Medium21
not blocked21
Working exploit published5
No public exploit16
199789
Not applicable89
Medium89
not blocked89
Working exploit published18
No public exploit71
199885
Not applicable85
Medium85
not blocked85
Working exploit published11
No public exploit74
1999357
Outside Waratek scope1
Not applicable356
Medium357
not blocked357
Working exploit published119
No public exploit238
2000467
Mitigation candidate4
No exploit published3
Not applicable460
Medium467
not blocked467
Exploited2
Working exploit published195
No public exploit270
2001706
Mitigation candidate2
No exploit published4
Outside Waratek scope7
Not applicable693
Medium706
not blocked706
Exploited3
Working exploit published219
Forecast only2
No public exploit482
2002470
Protected by Waratek1
Mitigation candidate3
No exploit published8
Outside Waratek scope4
Not applicable454
Medium470
blocked by ARMR today1
not blocked469
Exploited2
Working exploit published115
Forecast only3
No public exploit350
1990199219941996199820002002
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-1228 | Medium | 2002-10-28 | Not applicable | No public exploit | Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by killing the lockd daemon. |
| CVE-2002-1224 | Medium | 2002-10-28 | Not applicable | Working exploit published | Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter. |
| CVE-2002-1216 | Medium | 2002-10-28 | Not applicable | No public exploit | GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification that effectively disabled the security check. |
| CVE-2002-1213 | Medium | 2002-10-28 | Not applicable | No public exploit | Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with ".." (dot-dot) sequences containing URL-encoded forward slash ("%2F") characters. |
| CVE-2002-1212 | Medium | 2002-10-28 | Not applicable | No public exploit | Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to cause a denial of service (crash) via a long HTTP GET request. |
| CVE-2002-1203 | Medium | 2002-10-28 | Not applicable | No public exploit | IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed TCP packets without any flags set. |
| CVE-2002-1201 | Medium | 2002-10-28 | Not applicable | No public exploit | IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers. |
| CVE-2002-1199 | Medium | 2002-10-28 | Not applicable | No public exploit | The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments. |
| CVE-2002-1195 | Medium | 2002-10-28 | Not applicable | No public exploit | Cross-site scripting vulnerability (XSS) in the PHP interface for ht://Check 1.1 allows remote web servers to insert arbitrary HTML, including script, via a web page. |
| CVE-2002-1192 | Medium | 2002-10-28 | Not applicable | Working exploit published | Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file. |
| CVE-2002-1191 | Medium | 2002-10-28 | Not applicable | No public exploit | The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a denial of service via malformed input to TCP port 1001. |
| CVE-2002-1118 | Medium | 2002-10-28 | Not applicable | No public exploit | TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service (hang or crash) via a SERVICE_CURLOAD command. |
| CVE-2002-0990 | Medium | 2002-10-28 | Not applicable | No public exploit | The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection resource exhaustion) via multiple connection requests to domains whose DNS server is unresponsive or does not exist, which generates a long timeout. |
| CVE-2001-1451 | Medium | 2002-10-22 | Not applicable | No public exploit | Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service (memory consumption) via a large number of GET or GETNEXT requests. |
| CVE-2002-1189 | Medium | 2002-10-11 | Not applicable | No public exploit | The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding. |
| CVE-2002-1178 | Medium | 2002-10-11 | Not applicable | Working exploit published | Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory. |
| CVE-2002-1175 | Medium | 2002-10-11 | Not applicable | No public exploit | The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary. |
| CVE-2002-1170 | Medium | 2002-10-11 | Not applicable | No public exploit | The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service (crash) via a NULL dereference. |
| CVE-2002-1165 | Medium | 2002-10-11 | Not applicable | Working exploit published | Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "||" sequences or (2) "/" characters, which are not properly filtered or verified. |
| CVE-2002-1156 | Medium | 2002-10-11 | Not applicable | No public exploit | Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI enabled. |
| CVE-2002-1154 | Medium | 2002-10-11 | Not applicable | No public exploit | anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log. |
| CVE-2002-1153 | Medium | 2002-10-11 | No exploit published | No public exploit | IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host". |
| CVE-2002-1150 | Medium | 2002-10-11 | Not applicable | No public exploit | The Remote Desktop Sharing (RDS) Screen Saver Protection capability for Microsoft NetMeeting 3.01 through SP2 (4.4.3396) allows attackers with physical access to hijack remote sessions by entering certain logoff or shutdown sequences (such as CTRL-ALT-DEL) and canceling out of the resulting user confirmation prompts, such as when the remote user is editing a document. |
| CVE-2002-1149 | Medium | 2002-10-11 | Not applicable | Exploited | The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings. |
| CVE-2002-1148 | Medium | 2002-10-11 | Mitigation candidate | Working exploit published | The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet. |
| CVE-2002-1146 | Medium | 2002-10-11 | Not applicable | No public exploit | The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instead of the actual size when processing a DNS response, which causes the stub resolvers to read past the actual boundary ("read buffer overflow"), allowing remote attackers to cause a denial of service (crash). |
| CVE-2002-1141 | Medium | 2002-10-11 | Not applicable | No public exploit | An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service via malformed fragmented RPC client packets, aka "Denial of service by sending an invalid RPC request." |
| CVE-2002-1140 | Medium | 2002-10-11 | Not applicable | No public exploit | The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service (service hang) via malformed packet fragments, aka "Improper parameter size check leading to denial of service." |
| CVE-2002-1139 | Medium | 2002-10-11 | Not applicable | No public exploit | The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka "Incorrect Target Path for Zipped File Decompression." |
| CVE-2002-0867 | Medium | 2002-10-11 | Not applicable | No public exploit | Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet Explorer via invalid handle data in a Java applet, aka "Handle Validation Flaw." |
| CVE-2002-0864 | Medium | 2002-10-11 | Not applicable | No public exploit | The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote Desktop is enabled via a PDU Confirm Active data packet that does not set the Pattern BLT command, aka "Denial of Service in Remote Desktop." |
| CVE-2002-0863 | Medium | 2002-10-11 | Not applicable | No public exploit | Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol." |
| CVE-2002-0840 | Medium | 2002-10-11 | Outside Waratek scope | Working exploit published | Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157. |
| CVE-2002-0838 | Medium | 2002-10-10 | Not applicable | Working exploit published | Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf. |
| CVE-2002-0708 | Medium | 2002-10-10 | Not applicable | Working exploit published | Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP request containing ... (triple dot) sequences. |
| CVE-2002-0707 | Medium | 2002-10-10 | Not applicable | No public exploit | The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU consumption) via large GET requests, possibly due to a buffer overflow. |
| CVE-2002-0399 | Medium | 2002-10-10 | Not applicable | No public exploit | Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) "/.." or (2) "./.." string, which removes the leading slash but leaves the "..", a variant of CVE-2001-1267. |
| CVE-2002-1134 | Medium | 2002-10-04 | Not applicable | No public exploit | Unknown vulnerability in Compaq WEBES Service Tools 2.0 through WEBES 4.0 (Service Pack 5) allows local users to read privileged files. |
| CVE-2002-1133 | Medium | 2002-10-04 | Not applicable | No public exploit | Encoded directory traversal vulnerability in Dino's web server 2.1 allows remote attackers to read arbitrary files via ".." (dot dot) sequences with URL-encoded (1) "/" (%2f") or (2) "\" (%5c) characters. |
| CVE-2002-1132 | Medium | 2002-10-04 | Not applicable | No public exploit | SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage file argument, which generates an error message when the file cannot be included in the script. |
| CVE-2002-1119 | Medium | 2002-10-04 | Not applicable | No public exploit | os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack. |
| CVE-2002-1117 | Medium | 2002-10-04 | Not applicable | No public exploit | Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares. |
| CVE-2002-1115 | Medium | 2002-10-04 | Not applicable | No public exploit | Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the f_id bug ID parameter to (1) bug_update_advanced_page.php, (2) bug_update_page.php, (3) view_bug_advanced_page.php, or (4) view_bug_page.php. |
| CVE-2002-1112 | Medium | 2002-10-04 | Not applicable | No public exploit | Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page. |
| CVE-2002-1111 | Medium | 2002-10-04 | Not applicable | No public exploit | print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted. |
| CVE-2002-1108 | Medium | 2002-10-04 | Not applicable | No public exploit | Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mode, can be forced into acknowledging a TCP packet from outside the tunnel. |
| CVE-2002-1105 | Medium | 2002-10-04 | Not applicable | No public exploit | Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, allows local users to use a utility program to obtain the group password. |
| CVE-2002-1104 | Medium | 2002-10-04 | Not applicable | No public exploit | Cisco Virtual Private Network (VPN) Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service (crash) via TCP packets with source and destination ports of 137 (NETBIOS). |
| CVE-2002-1103 | Medium | 2002-10-04 | Not applicable | No public exploit | Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via (1) malformed or (2) large ISAKMP packets. |
| CVE-2002-1102 | Medium | 2002-10-04 | Not applicable | No public exploit | The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to cause a denial of service via an incoming LAN-to-LAN connection with an existing security association with another device on the remote network, which causes the concentrator to remove the previous connection. |
| CVE-2002-1101 | Medium | 2002-10-04 | Not applicable | Working exploit published | Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name. |
| CVE-2002-1100 | Medium | 2002-10-04 | Not applicable | No public exploit | Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service (crash) via a long (1) username or (2) password to the HTML login interface. |
| CVE-2002-1099 | Medium | 2002-10-04 | Not applicable | No public exploit | Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain HTML pages. |
| CVE-2002-1095 | Medium | 2002-10-04 | Not applicable | No public exploit | Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Windows-based PPTP client with the "No Encryption" option set. |
| CVE-2002-1094 | Medium | 2002-10-04 | Not applicable | No public exploit | Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request. |
| CVE-2002-1093 | Medium | 2002-10-04 | Not applicable | No public exploit | HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.0.3(B) allows remote attackers to cause a denial of service (CPU consumption) via a long URL request. |
| CVE-2002-1089 | Medium | 2002-10-04 | Not applicable | Working exploit published | rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks. |
| CVE-2002-1087 | Medium | 2002-10-04 | Not applicable | No public exploit | The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request. |
| CVE-2002-1084 | Medium | 2002-10-04 | Not applicable | No public exploit | The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which allows remote attackers to modify and view restricted information via HTTP POST requests. |
| CVE-2002-1083 | Medium | 2002-10-04 | Not applicable | No public exploit | Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to (1) create directories using the Maintain Images:Add New:Create Subdirectory item, or (2) list directories using the Maintain Images file listing, via .. (dot dot) sequences. |
| CVE-2002-1082 | Medium | 2002-10-04 | Not applicable | No public exploit | The Image Upload capability for ezContents 1.40 and earlier allows remote attackers to cause ezContents to perform operations on local files as if they were uploaded. |
| CVE-2002-1081 | Medium | 2002-10-04 | Not applicable | No public exploit | The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a "+" character. |
| CVE-2002-1079 | Medium | 2002-10-04 | Not applicable | Working exploit published | Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GET request. |
| CVE-2002-1078 | Medium | 2002-10-04 | Not applicable | No public exploit | Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) characters. |
| CVE-2002-1077 | Medium | 2002-10-04 | Not applicable | Working exploit published | IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field. |
| CVE-2002-1072 | Medium | 2002-10-04 | Not applicable | Working exploit published | ZyXEL Prestige 642R 2.50(FA.1) and Prestige 310 V3.25(M.01), allows remote attackers to cause a denial of service via an oversized, fragmented "jolt" style ICMP packet. |
| CVE-2002-1071 | Medium | 2002-10-04 | Not applicable | Working exploit published | ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services (crash) via a TCP packet with both the SYN and ACK flags set. |
| CVE-2002-1069 | Medium | 2002-10-04 | Not applicable | No public exploit | The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages (1) release.htm, (2) Device Status, or (3) Device Information. |
| CVE-2002-1068 | Medium | 2002-10-04 | Not applicable | No public exploit | The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large HTTP POST request. |
| CVE-2002-1067 | Medium | 2002-10-04 | Not applicable | No public exploit | Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows remote attackers to cause a denial of service (reboot and reset) via a long password, possibly due to a buffer overflow. |
| CVE-2002-1064 | Medium | 2002-10-04 | Not applicable | No public exploit | Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server. |
| CVE-2002-1063 | Medium | 2002-10-04 | Not applicable | No public exploit | Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of FTP PASV requests, which consumes all available FTP ports. |
| CVE-2002-1060 | Medium | 2002-10-04 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06 allows remote attackers to inject arbitrary web script or HTML via a URL to a nonexistent hostname that includes the HTML, which is inserted into the resulting error page. |
| CVE-2002-1055 | Medium | 2002-10-04 | Not applicable | No public exploit | Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long password. |
| CVE-2002-1054 | Medium | 2002-10-04 | Not applicable | Exploited | Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command. |
| CVE-2002-1053 | Medium | 2002-10-04 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message. |
| CVE-2002-1052 | Medium | 2002-10-04 | Not applicable | No public exploit | Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the "con" device, or (2) obtain the physical path of the server using two requests to the "aux" device. |
| CVE-2002-1051 | Medium | 2002-10-04 | Not applicable | No public exploit | Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminator) command line argument. |
| CVE-2002-1049 | Medium | 2002-10-04 | Not applicable | No public exploit | Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element. |
| CVE-2002-1046 | Medium | 2002-10-04 | Not applicable | No public exploit | Dynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service (crash) via a malformed packet containing tab characters to TCP port 4110. |
| CVE-2002-1045 | Medium | 2002-10-04 | Not applicable | No public exploit | Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Date field that is converted into a year greater than 2037. |
| CVE-2002-1043 | Medium | 2002-10-04 | Not applicable | Working exploit published | Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Subject ("\t\t"). |
| CVE-2002-1042 | Medium | 2002-10-04 | Not applicable | Working exploit published | Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter. |
| CVE-2002-1041 | Medium | 2002-10-04 | Not applicable | No public exploit | Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames. |
| CVE-2002-1040 | Medium | 2002-10-04 | Not applicable | No public exploit | Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames. |
| CVE-2002-1039 | Medium | 2002-10-04 | Not applicable | No public exploit | Directory traversal vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to read arbitrary files via .. (dot dot) sequences when downloading files from the Projects: Attachments feature. |
| CVE-2002-1038 | Medium | 2002-10-04 | Not applicable | No public exploit | Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the (1) Projects: Upload File Attachment or (2) Work Orders: Import features. |
| CVE-2002-1037 | Medium | 2002-10-04 | Not applicable | No public exploit | Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the (1) Ticket# Find, (2) Priorities, (3) Severities, (4) Projects, (5) WO# Find, (6) Departments and (7) Users features. |
| CVE-2002-1035 | Medium | 2002-10-04 | Not applicable | No public exploit | Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service (crash) via an HTTP request with a long, malformed HTTP 1version number. |
| CVE-2002-1033 | Medium | 2002-10-04 | Not applicable | Working exploit published | Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via a "..:" sequence (dot-dot variant) in the argument. |
| CVE-2002-1031 | Medium | 2002-10-04 | Not applicable | Working exploit published | KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character. |
| CVE-2002-1029 | Medium | 2002-10-04 | Not applicable | Working exploit published | Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service (crash) via a malformed request to TCP port 17990. |
| CVE-2002-1028 | Medium | 2002-10-04 | Not applicable | Working exploit published | Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service (crash) via long arguments. |
| CVE-2002-1026 | Medium | 2002-10-04 | Not applicable | No public exploit | Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly triggering a buffer overflow. |
| CVE-2002-1025 | Medium | 2002-10-04 | Not applicable | No public exploit | JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed. |
| CVE-2002-1023 | Medium | 2002-10-04 | Not applicable | Working exploit published | BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI. |
| CVE-2002-1021 | Medium | 2002-10-04 | Not applicable | Working exploit published | BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte. |
| CVE-2002-1020 | Medium | 2002-10-04 | Not applicable | No public exploit | The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum number of loans is exceeded by accessing the "Add to bookbag" feature when the server reports that no more copies are available. |
| CVE-2002-1019 | Medium | 2002-10-04 | Not applicable | No public exploit | The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modified loanMin parameter to download.asp. |
| CVE-2002-1018 | Medium | 2002-10-04 | Not applicable | No public exploit | The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which allows remote attackers to cause a denial of service (resource exhaustion) by checking out the same book multiple times. |