5356 matches found
CVE-2002-2219
chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow file via a long user userid field...
CVE-2002-2299
PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code via the rootpath parameter...
CVE-2002-2301
Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database...
CVE-2002-1745
Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files...
CVE-2002-1983
The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service hang and possibly execute arbitrary code by creating multiple timers with a 1-ms tick...
CVE-2002-2115
Cross-site scripting XSS vulnerability in Hyper NIKKI System HNS Lite before 0.9 and HNS before 2.10-pl2 allows remote attackers to inject arbitrary web script or HTML...
CVE-2002-2042
ptrace in the QNX realtime operating system RTOS 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow local users to execute arbitrary code by modifying running processes...
CVE-2002-1942
Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been broken or closed early, which allows remote attackers to cause a denial of service crash via a large number of concurrent sessions...
CVE-2002-1630
The sendmail.jsp sample page in Oracle 9i Application Server 9iAS allows remote attackers to send arbitrary emails...
CVE-2002-1743
AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service crash via a malformed .hpf file...
CVE-2002-1805
Cross-site scripting XSS vulnerability in DaCode 1.2.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...
CVE-2002-1946
Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme one-to-one mapping in a registry key, which allows local users to obtain and decrypt the password...
CVE-2002-2026
Buffer overflow in BrowseFTP 1.62 client allows remote FTP servers to execute arbitrary code via a long FTP "220" message reply...
CVE-2002-2141
BEA WebLogic Server and Express 7.0 and 7.0.0.1, when running Servlets and Enterprise JavaBeans EJB on more than one server, will remove the security constraints and roles on all servers for any Servlets or EJB that are used by an application that is undeployed on one server, which could allow...
CVE-2002-1782
The default configuration of University of Washington IMAP daemon wu-imapd, when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user...
CVE-2002-1779
The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 NPW does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 CVE-2000-0305...
CVE-2002-2137
GlobalSunTech Wireless Access Points 1 WISECOM GL2422AP-0T, and possibly OEM products such as 2 D-Link DWL-900AP+ B1 2.1 and 2.2, 3 ALLOY GL-2422AP-S, 4 EUSSO GL2422-AP, and 5 LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the administrator password, and...
CVE-2002-1727
Cross-site scripting vulnerability XSS in 1 asweb.exe and 2 asweb4.exe in askSam Web Publisher 1 and 4 allows remote attackers to execute arbitrary script as other users via a URL...