Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29997 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-0803 1 Mozilla 1 Bugzilla 2026-06-16 5.0 MEDIUM N/A
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi.
CVE-2002-0802 1 Postgresql 1 Postgresql 2026-06-16 7.5 HIGH N/A
The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks.
CVE-2002-0801 1 Macromedia 1 Jrun 2026-06-16 10.0 HIGH N/A
Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file.
CVE-2002-0800 1 Working Resources Inc. 1 Badblue 2026-06-16 5.0 MEDIUM N/A
BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end.
CVE-2002-0799 1 Youngzsoft 1 Cmailserver 2026-06-16 7.5 HIGH N/A
Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.
CVE-2002-0798 1 Hp 1 Hp-ux 2026-06-16 2.1 LOW N/A
Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which reportedly can be used to cause a denial of service.
CVE-2002-0797 1 Sun 2 Solaris, Sunos 2026-06-16 10.0 HIGH N/A
Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges.
CVE-2002-0796 1 Sun 2 Solaris, Sunos 2026-06-16 10.0 HIGH N/A
Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges.
CVE-2002-0795 1 Freebsd 1 Freebsd 2026-06-16 2.1 LOW N/A
The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files.
CVE-2002-0794 1 Freebsd 1 Freebsd 2026-06-16 5.0 MEDIUM N/A
The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows remote attackers to cause a denial of service (network service availability) via a large number of connection attempts, which fills the queue.
CVE-2002-0792 1 Cisco 2 Content Services Switch 11000, Webns 2026-06-16 5.0 MEDIUM N/A
The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XML data.
CVE-2002-0791 1 Novell 1 Netware 2026-06-16 5.0 MEDIUM N/A
Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length.
CVE-2002-0790 1 Ibm 1 Aix 2026-06-16 2.1 LOW N/A
clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges.
CVE-2002-0789 1 Mnogosearch 1 Mnogosearch 2026-06-16 7.5 HIGH N/A
Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter.
CVE-2002-0787 1 Critical Path 1 Injoin Directory Server 2026-06-16 7.5 HIGH N/A
Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.
CVE-2002-0786 1 Critical Path 1 Injoin Directory Server 2026-06-16 5.0 MEDIUM N/A
iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter.
CVE-2002-0785 1 Aol 1 Instant Messenger 2026-06-16 5.0 MEDIUM N/A
AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow.
CVE-2002-0784 1 Lysias 1 Lidik Webserver 2026-06-16 5.0 MEDIUM N/A
Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot).
CVE-2002-0783 1 Opera Software 1 Opera Web Browser 2026-06-16 7.5 HIGH N/A
Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL.
CVE-2002-0782 1 Novell 1 Bordermanager 2026-06-16 5.0 MEDIUM N/A
Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a large number of connection requests to hosts that do not have a specific route, which may be forwarded to the public interface.