|
358701
|
5.0 |
MEDIUM
|
novell
|
netware
|
Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command.
|
NVD-CWE-Other
|
CVE-2002-0930
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358702
|
7.5 |
HIGH
|
luis_bernardo
|
myhelpdesk
|
Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket…
|
NVD-CWE-Other
|
CVE-2002-0931
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358703
|
6.4 |
MEDIUM
|
luis_bernardo
|
myhelpdesk
|
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the op…
|
NVD-CWE-Other
|
CVE-2002-0932
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358704
|
7.5 |
HIGH
|
datalex
|
bookit_consumer
|
Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.
|
NVD-CWE-Other
|
CVE-2002-0933
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358705
|
6.4 |
MEDIUM
|
jon_hedley
|
alienform2
|
Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the m…
|
NVD-CWE-Other
|
CVE-2002-0934
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358706
|
5.0 |
MEDIUM
|
macromedia
|
jrun
|
The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).
|
NVD-CWE-Other
|
CVE-2002-0937
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358707
|
7.5 |
HIGH
|
cisco
|
secure_access_control_server
|
Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.
|
NVD-CWE-Other
|
CVE-2002-0938
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358708
|
4.6 |
MEDIUM
|
ncipher
|
nforce
nshield
|
The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application t…
|
NVD-CWE-Other
|
CVE-2002-0941
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358709
|
7.5 |
HIGH
|
lumigent
|
log_explorer
|
Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartPr…
|
NVD-CWE-Other
|
CVE-2002-0942
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358710
|
6.4 |
MEDIUM
|
metalinks
|
metacart2.sql
|
MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitive information such as passwords and credit card numbers via…
|
NVD-CWE-Other
|
CVE-2002-0943
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358711
|
7.5 |
HIGH
|
deepmetrix
|
livestats
|
Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the (1) user-agent or (2) referrer, which a…
|
NVD-CWE-Other
|
CVE-2002-0944
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358712
|
7.5 |
HIGH
|
seanox
|
devwex
|
Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
|
NVD-CWE-Other
|
CVE-2002-0945
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358713
|
5.0 |
MEDIUM
|
seanox
|
devwex
|
Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files via ..\ (dot dot) sequences in an HTTP request.
|
NVD-CWE-Other
|
CVE-2002-0946
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358714
|
7.5 |
HIGH
|
oracle
|
application_server
reports
|
Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long databas…
|
NVD-CWE-Other
|
CVE-2002-0947
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358715
|
7.5 |
HIGH
|
telindus
|
adsl_router
|
Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other …
|
NVD-CWE-Other
|
CVE-2002-0949
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358716
|
7.5 |
HIGH
|
transware
|
active_mail
|
Cross-site scripting vulnerability in TransWARE Active! mail 1.422 and 2.0 allows remote attackers to execute arbitrary code via a certain e-mail header, which is not properly filtered.
|
NVD-CWE-Other
|
CVE-2002-0950
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358717
|
10.0 |
HIGH
|
ruslan_communications
|
body_builder
|
SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the username and password.
|
NVD-CWE-Other
|
CVE-2002-0951
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358718
|
7.5 |
HIGH
|
php_address
|
php_address
|
globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCoo…
|
NVD-CWE-Other
|
CVE-2002-0953
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358719
|
7.5 |
HIGH
|
yabb
|
yabb
|
Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script i…
|
NVD-CWE-Other
|
CVE-2002-0955
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358720
|
7.5 |
HIGH
|
iss
|
blackice_agent
|
BlackICE Agent 3.1.eal does not always reactivate after a system standby, which could allow remote attackers and local users to bypass intended firewall restrictions.
|
NVD-CWE-Other
|
CVE-2002-0956
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358721
|
5.0 |
MEDIUM
|
iss
|
blackice_agent
|
The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow remote attackers to cause a denial of service (memory consumption) via a large…
|
NVD-CWE-Other
|
CVE-2002-0957
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358722
|
7.5 |
HIGH
|
ekilat_llc
|
php\(reactor\)
|
Cross-site scripting vulnerability in browse.php for PHP(Reactor) 1.2.7 allows remote attackers to execute script as other users via the go parameter in the comments section.
|
NVD-CWE-Other
|
CVE-2002-0958
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358723
|
7.5 |
HIGH
|
splatt
|
splatt_forum
|
Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an [img] tag with a closing quote followed by the script.
|
NVD-CWE-Other
|
CVE-2002-0959
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358724
|
7.5 |
HIGH
|
voxel
|
cbms
|
Multiple cross-site scripting vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allows remote attackers to execute arbitrary script as other CBMS users.
|
NVD-CWE-Other
|
CVE-2002-0960
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358725
|
7.5 |
HIGH
|
voxel
|
cbms
|
Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clients via dltclnt.php, possibly in a SQL injection a…
|
NVD-CWE-Other
|
CVE-2002-0961
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358726
|
7.5 |
HIGH
|
geeklog
|
geeklog
|
Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event, (2) the topic para…
|
NVD-CWE-Other
|
CVE-2002-0962
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358727
|
5.0 |
MEDIUM
|
geeklog
|
geeklog
|
SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter.
|
NVD-CWE-Other
|
CVE-2002-0963
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358728
|
5.0 |
MEDIUM
|
valve_software
|
half-life
half-life_dedicated_server
|
Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to the initial challenge with different cd_key values, which rea…
|
NVD-CWE-Other
|
CVE-2002-0964
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358729
|
7.5 |
HIGH
|
oracle
|
oracle9i
|
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not prop…
|
NVD-CWE-Other
|
CVE-2002-0965
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358730
|
7.5 |
HIGH
|
aci
|
4d_webserver
|
Buffer overflow in 4D web server 6.7.3 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request.
|
NVD-CWE-Other
|
CVE-2002-0966
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358731
|
7.5 |
HIGH
|
edonkey2000
|
edonkey_2000_client
|
Buffer overflow in eDonkey 2000 35.16.60 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long "ed2k:" URL.
|
NVD-CWE-Other
|
CVE-2002-0967
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358732
|
7.2 |
HIGH
|
hp
|
cifs-9000_server
|
Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S…
|
NVD-CWE-Other
|
CVE-2002-0991
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358733
|
2.1 |
LOW
|
hp
|
hp-ux
|
Unknown vulnerability in IPV6 functionality for DCE daemons (1) dced or (2) rpcd on HP-UX 11.11 allows attackers to cause a denial of service (crash) via an attack that modifies internal data.
|
NVD-CWE-Other
|
CVE-2002-0992
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358734
|
7.5 |
HIGH
|
sun
|
sun_pci_ii_driver
|
SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications.
|
NVD-CWE-Other
|
CVE-2002-0994
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358735
|
7.5 |
HIGH
|
gianluca_baldo
|
phpauction
|
login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.
|
NVD-CWE-Other
|
CVE-2002-0995
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358736
|
7.5 |
HIGH
|
novell
|
netmail
netmail_xe
|
Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before 3.0.3C allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) WebAdmin or (2) ModWeb.
|
NVD-CWE-Other
|
CVE-2002-0996
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358737
|
5.0 |
MEDIUM
|
novell
|
netmail
netmail_xe
|
Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service.
|
NVD-CWE-Other
|
CVE-2002-0997
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358738
|
7.5 |
HIGH
|
analogx
|
simpleserver_shout
|
Buffer overflow in AnalogX SimpleServer:Shout 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long request to TCP port 8001.
|
NVD-CWE-Other
|
CVE-2002-1000
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358739
|
7.5 |
HIGH
|
analogx
|
proxy
|
Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long HTTP request to TCP port 6588 or (2) a SOCKS 4A r…
|
NVD-CWE-Other
|
CVE-2002-1001
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358740
|
5.0 |
MEDIUM
|
novell
|
emframe
|
Buffer overflow in Novell iManager (eMFrame 1.2.1) allows remote attackers to cause a denial of service (crash) via a long user name.
|
NVD-CWE-Other
|
CVE-2002-1002
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358741
|
7.5 |
HIGH
|
mywebserver
|
mywebserver
|
Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
|
NVD-CWE-Other
|
CVE-2002-1003
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358742
|
5.0 |
MEDIUM
|
argosoft
|
argosoft_mail_server
|
Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.
|
NVD-CWE-Other
|
CVE-2002-1004
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358743
|
6.8 |
MEDIUM
|
bbc_education
|
betsie
|
Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl.
|
NVD-CWE-Other
|
CVE-2002-1006
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358744
|
7.5 |
HIGH
|
blackboard
|
blackboard
|
Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter in a link to login.pl, (2) the CTID parameter in ProcessInf…
|
NVD-CWE-Other
|
CVE-2002-1007
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358745
|
7.5 |
HIGH
|
summit_computer_networks
|
lil_http_server
|
Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlc…
|
NVD-CWE-Other
|
CVE-2002-1008
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358746
|
7.5 |
HIGH
|
summit_computer_networks
|
lil_http_server
|
Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2…
|
NVD-CWE-Other
|
CVE-2002-1009
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358747
|
7.5 |
HIGH
|
lotus
|
domino_r4
|
Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" character, which is treated as a wildcard character and bypasse…
|
NVD-CWE-Other
|
CVE-2002-1010
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358748
|
7.5 |
HIGH
|
ibm
|
tivoli_management_framework
|
Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via …
|
NVD-CWE-Other
|
CVE-2002-1011
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358749
|
7.5 |
HIGH
|
ibm
|
tivoli_management_framework
|
Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET …
|
NVD-CWE-Other
|
CVE-2002-1012
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
358750
|
7.2 |
HIGH
|
inktomi
|
media-ixt
traffic_edge
traffic_server
|
Buffer overflow in traffic_manager for Inktomi Traffic Server 4.0.18 through 5.2.2, Traffic Edge 1.1.2 and 1.5.0, and Media-IXT 3.0.4 allows local users to gain root privileges via a long -path argum…
|
NVD-CWE-Other
|
CVE-2002-1013
|
2008-09-6 05:29 |
2002-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
