VYPR

CVEs

342,793 total · page 6767 of 6,856

AllCriticalHighKEV
  • CVE-2002-0202May 16, 2002
    Paintbbs
    Paintbbs
    risk 0.00cvss —epss 0.00

    PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to (1) obtain the encrypted server password via the world-readable oekakibbs.conf file, or (2) modify the server configuration via the world-writeable /oekaki/ folder.

  • CVE-2002-0203May 16, 2002
    Tarantella
    Tarantella Enterprise
    risk 0.00cvss —epss 0.02

    ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter.

  • CVE-2002-0204May 16, 2002
    GNU
    Chess
    risk 0.00cvss —epss 0.03

    Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code via a long command.

  • CVE-2002-0205May 16, 2002
    Plumtree
    Plumtree Corporate Portal
    risk 0.00cvss —epss 0.02

    Cross-site scripting (CSS) vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the "Description" parameter.

  • CVE-2002-0206May 16, 2002
    PHP-Nuke
    PHP Nuke
    risk 0.04cvss —epss 0.07

    index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.

  • CVE-2002-0207May 16, 2002
    RealNetworks
    Realplayer
    risk 0.04cvss —epss 0.07

    Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header.

  • CVE-2002-0208May 16, 2002
    PGP Security
    PGPfire
    risk 0.00cvss —epss 0.02

    PGP Security PGPfire 7.1 for Windows alters the system's TCP/IP stack and modifies packets in ICMP error messages in a way that allows remote attackers to determine that the system is running PGPfire.

  • CVE-2002-0209May 16, 2002
    Nortel
    Alteon Acedirector
    risk 0.03cvss —epss 0.03

    Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server…

  • CVE-2002-0210May 16, 2002
    TOLIS Group
    Bru
    risk 0.03cvss —epss 0.01

    setlicense for TOLIS Group Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file.

  • CVE-2002-0211May 16, 2002
    Tarantella
    Tarantella Enterprise
    risk 0.03cvss —epss 0.01

    Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.

  • CVE-2002-0212May 16, 2002
    Hosting Controller
    Hosting Controller
    risk 0.00cvss —epss 0.02

    The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack.

  • CVE-2002-0213May 16, 2002
    Sgi
    Irix
    risk 0.00cvss —epss 0.00

    xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory.

  • CVE-2002-0214May 16, 2002
    Compaq
    Intel PRO/Wireless 2011B LAN USB Device Driver
    risk 0.00cvss —epss 0.00

    Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalent Privacy) key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the…

  • CVE-2002-0215May 16, 2002
    Steve Kneizys
    Agora.cgi
    risk 0.04cvss —epss 0.07

    Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message.

  • CVE-2002-0216May 16, 2002
    XOOPS
    Xoops
    risk 0.00cvss —epss 0.01

    userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter.

  • CVE-2002-0217May 16, 2002
    XOOPS
    Xoops
    risk 0.00cvss —epss 0.02

    Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients via (1) the Title field or a Private Message Box or (2) the image field parameter in pmlite.php.

  • CVE-2002-0218May 16, 2002
    Sas
    Base
    risk 0.00cvss —epss 0.00

    Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a command line argument.

  • CVE-2002-0219May 16, 2002
    Sas
    Base
    risk 0.00cvss —epss 0.01

    Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument.

  • CVE-2002-0220May 16, 2002
    Phpsmssend
    Phpsmssend
    risk 0.00cvss —epss 0.02

    phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters.

  • CVE-2002-0221May 16, 2002
    Etype
    Eserv
    risk 0.00cvss —epss 0.02

    Etype Eserv 2.97 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV.

  • CVE-2002-0222May 16, 2002
    Etype
    Eserv
    risk 0.00cvss —epss 0.02

    Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.

  • CVE-2002-0223May 16, 2002
    Wired Community Software
    Wwwthreads
    risk 0.00cvss —epss 0.02

    Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filename that contains an accepted extension, but ends in a different extension.

  • CVE-2002-0224May 16, 2002
    Microsoft
    Windows 2000
    risk 0.02cvss —epss 0.22

    The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.

  • CVE-2002-0225May 16, 2002
    Cisco Systems, Inc.
    tac_plus Tacacs+ daemon
    risk 0.00cvss —epss 0.00

    tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files.

  • CVE-2002-0226May 16, 2002
    Dcscripts
    Dcforum\+
    risk 0.00cvss —epss 0.02

    retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user.

  • CVE-2002-0227May 16, 2002
    Kicq
    Kicq
    risk 0.03cvss —epss 0.03

    KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message.

  • CVE-2002-0228May 16, 2002
    Microsoft
    Msn Messenger
    risk 0.01cvss —epss 0.16

    Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites).

  • CVE-2002-0229May 16, 2002
    PHP
    PHP
    risk 0.04cvss —epss 0.10

    Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.

  • CVE-2002-0230May 16, 2002
    Jon Howell
    Faq O Matic
    risk 0.04cvss —epss 0.08

    Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message.

  • CVE-2002-0231May 16, 2002
    Khaled Mardam Bey
    Mirc
    risk 0.04cvss —epss 0.10

    Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickname.

  • CVE-2002-1056May 16, 2002
    Microsoft
    Word
    risk 0.01cvss —epss 0.19

    Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the…

  • CVE-2002-1592May 6, 2002
    Apache
    HTTP Server
    risk 0.01cvss —epss 0.12

    The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.

  • CVE-1999-1570May 1, 2002
    Caldera
    Openserver
    risk 0.00cvss —epss 0.00

    Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.

  • CVE-2002-1602Apr 23, 2002
    GNU
    Screen
    risk 0.03cvss —epss 0.01

    Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code.

  • CVE-2002-0037Apr 22, 2002
    IBM
    Lotus Domino
    risk 0.00cvss —epss 0.03

    Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.

  • CVE-2002-0041Apr 22, 2002
    Sgi
    Irix
    risk 0.00cvss —epss 0.02

    Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump.

  • CVE-2002-0064Apr 22, 2002
    Funk Software
    Funk Software Proxy
    risk 0.00cvss —epss 0.00

    Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system.

  • CVE-2002-0065Apr 22, 2002
    Funk Software
    Funk Software Proxy
    risk 0.00cvss —epss 0.00

    Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry.

  • CVE-2002-0066Apr 22, 2002
    Funk Software
    Funk Software Proxy
    risk 0.00cvss —epss 0.02

    Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges.

  • CVE-2002-0071Apr 22, 2002
    Microsoft
    Internet Information Server
    risk 0.03cvss —epss 0.34

    Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.

  • CVE-2002-0072Apr 22, 2002
    Microsoft
    Internet Information Server
    risk 0.05cvss —epss 0.57

    The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the…

  • CVE-2002-0073Apr 22, 2002
    Microsoft
    Internet Information Server
    risk 0.05cvss —epss 0.56

    The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.

  • CVE-2002-0074Apr 22, 2002
    Microsoft
    Internet Information Server
    risk 0.03cvss —epss 0.34

    Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session.

  • CVE-2002-0075Apr 22, 2002
    Microsoft
    Internet Information Server
    risk 0.03cvss —epss 0.34

    Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.

  • CVE-2002-0079Apr 22, 2002
    Microsoft
    Internet Information Server
    risk 0.09cvss —epss 0.77

    Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.

  • CVE-2002-0147Apr 22, 2002
    Microsoft
    Internet Information Server
    risk 0.05cvss —epss 0.62

    Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."

  • CVE-2002-0148Apr 22, 2002
    Microsoft
    Internet Information Server
    risk 0.08cvss —epss 0.64

    Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.

  • CVE-2002-0149Apr 22, 2002
    Microsoft
    IIS
    risk 0.05cvss —epss 0.63

    Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.

  • CVE-2002-0150Apr 22, 2002
    Microsoft
    Internet Information Server
    risk 0.04cvss —epss 0.49

    Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.

  • CVE-2002-0152Apr 22, 2002
    Microsoft
    Excel
    risk 0.01cvss —epss 0.17

    Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0…