VYPR

CVEs

376,727 total · page 7430 of 7,535

AllCriticalHighKEV
  • CVE-2002-1018Oct 4, 2002
    Adobe Inc.
    Content Server
    risk 0.00cvss —epss 0.02

    The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which allows remote attackers to cause a denial of service (resource exhaustion) by checking out the same book multiple times.

  • CVE-2002-1019Oct 4, 2002
    Adobe Inc.
    Content Server
    risk 0.00cvss —epss 0.03

    The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modified loanMin parameter to download.asp.

  • CVE-2002-1020Oct 4, 2002
    Adobe Inc.
    Content Server
    risk 0.00cvss —epss 0.02

    The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum number of loans is exceeded by accessing the "Add to bookbag" feature when the server reports that no more copies are available.

  • CVE-2002-1021Oct 4, 2002
    Working Resources Inc.
    Badblue
    risk 0.03cvss —epss 0.03

    BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte.

  • CVE-2002-1022Oct 4, 2002
    Working Resources Inc.
    Badblue
    risk 0.00cvss —epss 0.03

    BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.

  • CVE-2002-1023Oct 4, 2002
    Working Resources Inc.
    Badblue
    risk 0.03cvss —epss 0.03

    BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.

  • CVE-2002-1024Oct 4, 2002
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144).

  • CVE-2002-1025Oct 4, 2002
    Macromedia
    Jrun
    risk 0.00cvss —epss 0.02

    JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.

  • CVE-2002-1026Oct 4, 2002
    Macromedia
    Sitespring
    risk 0.00cvss —epss 0.03

    Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly triggering a buffer overflow.

  • CVE-2002-1027Oct 4, 2002
    Macromedia
    Sitespring
    risk 0.03cvss —epss 0.03

    Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 500error.jsp with the script in 1the et parameter.

  • CVE-2002-1028Oct 4, 2002
    Oddsock
    Song Requester
    risk 0.03cvss —epss 0.04

    Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service (crash) via long arguments.

  • CVE-2002-1029Oct 4, 2002
    Worldspan
    Res Manager
    risk 0.03cvss —epss 0.03

    Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service (crash) via a malformed request to TCP port 17990.

  • CVE-2002-1030Oct 4, 2002
    Bea
    WebLogic Server
    risk 0.00cvss —epss 0.01

    Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attackers to cause a denial of service (crash) via a flood of data and connections.

  • CVE-2002-1031Oct 4, 2002
    Key Focus
    Kf Web Server
    risk 0.04cvss —epss 0.08

    KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character.

  • CVE-2002-1032Oct 4, 2002
    Key Focus
    Kf Web Server
    risk 0.00cvss —epss 0.02

    Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.

  • CVE-2002-1033Oct 4, 2002
    SunPS
    iRunbook
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via a "..:" sequence (dot-dot variant) in the argument.

  • CVE-2002-1034Oct 4, 2002
    SunPS
    iRunbook
    risk 0.03cvss —epss 0.04

    none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argument.

  • CVE-2002-1035Oct 4, 2002
    Omnicron
    Omnihttpd
    risk 0.00cvss —epss 0.02

    Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service (crash) via an HTTP request with a long, malformed HTTP 1version number.

  • CVE-2002-1036Oct 4, 2002
    Fluid Dynamics Search Engine
    Fluid Dynamics Search Engine
    risk 0.04cvss —epss 0.07

    Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote attackers to execute web script via the (1) Rank or (2) Match parameters.

  • CVE-2002-1037Oct 4, 2002
    Michael Dean
    Double Choco Latte
    risk 0.00cvss —epss 0.02

    Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the (1) Ticket# Find, (2) Priorities, (3) Severities, (4) Projects, (5) WO# Find, (6) Departments and (7) Users…

  • CVE-2002-1038Oct 4, 2002
    Michael Dean
    Double Choco Latte
    risk 0.00cvss —epss 0.02

    Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the (1) Projects: Upload File Attachment or (2) Work Orders: Import features.

  • CVE-2002-1039Oct 4, 2002
    Michael Dean
    Double Choco Latte
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to read arbitrary files via .. (dot dot) sequences when downloading files from the Projects: Attachments feature.

  • CVE-2002-1040Oct 4, 2002
    IBM
    Aix
    risk 0.00cvss —epss 0.01

    Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames.

  • CVE-2002-1041Oct 4, 2002
    IBM
    Aix
    risk 0.00cvss —epss 0.01

    Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames.

  • CVE-2002-1042Oct 4, 2002
    Netscape
    Enterprise Server
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat…

  • CVE-2002-1043Oct 4, 2002
    Ultrafunk
    Popcorn
    risk 0.03cvss —epss 0.03

    Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Subject ("\t\t").

  • CVE-2002-1044Oct 4, 2002
    Ultrafunk
    Popcorn
    risk 0.00cvss —epss 0.04

    Buffer overflow in Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Subject field.

  • CVE-2002-1045Oct 4, 2002
    Ultrafunk
    Popcorn
    risk 0.00cvss —epss 0.02

    Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Date field that is converted into a year greater than 2037.

  • CVE-2002-1046Oct 4, 2002
    WatchGuard
    Firebox
    risk 0.00cvss —epss 0.02

    Dynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service (crash) via a malformed packet containing tab characters to TCP port 4110.

  • CVE-2002-1047Oct 4, 2002
    WatchGuard
    Soho Firewall
    risk 0.00cvss —epss 0.01

    The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name.

  • CVE-2002-1048Oct 4, 2002
    Microfocus
    Jetdirect
    risk 0.04cvss —epss 0.14

    HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet services via an SNMP request to the variable (.iso.3.6.1.4.1.11.2.3.9.4.2.1.3.9.1.1.0.

  • CVE-2002-1049Oct 4, 2002
    Hylafax
    Hylafax
    risk 0.00cvss —epss 0.02

    Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element.

  • CVE-2002-1050Oct 4, 2002
    Hylafax
    Hylafax
    risk 0.00cvss —epss 0.05

    Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long line of image data.

  • CVE-2002-1051Oct 4, 2002
    Ehud Gavron
    Tracesroute
    risk 0.00cvss —epss 0.01

    Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminator) command line argument.

  • CVE-2002-1052Oct 4, 2002
    Jigsaw
    Jigsaw
    risk 0.00cvss —epss 0.03

    Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the "con" device, or (2) obtain the physical path of the server using two requests to the "aux" device.

  • CVE-2002-1053Oct 4, 2002
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message.

  • CVE-2002-1054Oct 4, 2002
    Pablo Software Solutions
    FTP Server
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command.

  • CVE-2002-1055Oct 4, 2002
    Brother
    Nc 3100h
    risk 0.00cvss —epss 0.02

    Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long password.

  • CVE-2002-1057Oct 4, 2002
    Smartmax Software
    Mailmax
    risk 0.04cvss —epss 0.10

    Buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute arbitrary code via a long USER command.

  • CVE-2002-1058Oct 4, 2002
    Cobalt
    Qube
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file.

  • CVE-2002-1059Oct 4, 2002
    Van Dyke Technologies
    Securecrt
    risk 0.08cvss —epss 0.60

    Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.

  • CVE-2002-1060Oct 4, 2002
    Cacheflow
    Cacheos
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06 allows remote attackers to inject arbitrary web script or HTML via a URL to a nonexistent hostname that…

  • CVE-2002-1061Oct 4, 2002
    Jana
    Jana Server
    risk 0.00cvss —epss 0.06

    Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP GET request with a long major version number, (2) an HTTP GET request to the…

  • CVE-2002-1062Oct 4, 2002
    T. Hauck
    Jana Web Server
    risk 0.00cvss —epss 0.03

    Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries.

  • CVE-2002-1063Oct 4, 2002
    T. Hauck
    Jana Web Server
    risk 0.00cvss —epss 0.02

    Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of FTP PASV requests, which consumes all available FTP ports.

  • CVE-2002-1064Oct 4, 2002
    T. Hauck
    Jana Web Server
    risk 0.00cvss —epss 0.02

    Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server.

  • CVE-2002-1065Oct 4, 2002
    T. Hauck
    Jana Web Server
    risk 0.00cvss —epss 0.01

    Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes it easier for remote attackers to gain privileges via brute force username and password guessing.

  • CVE-2002-1066Oct 4, 2002
    T. Hauck
    Jana Web Server
    risk 0.00cvss —epss 0.04

    Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in a (1) RETR or (2) DELE command to the POP3 server, which exceeds the array limits and allows a buffer overflow…

  • CVE-2002-1067Oct 4, 2002
    Seh
    Ic9 Pocket Print Server Firmware
    risk 0.00cvss —epss 0.02

    Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows remote attackers to cause a denial of service (reboot and reset) via a long password, possibly due to a buffer overflow.

  • CVE-2002-1068Oct 4, 2002
    Dlink
    DP-300
    risk 0.00cvss —epss 0.01

    The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large HTTP POST request.