5356 matches found
CVE-2002-1003
CVE-2002-1003: A buffer overflow in MyWebServer 1.02 and earlier is triggered by a long HTTP GET request, allowing remote attackers to execute arbitrary code. This is a network-facing vulnerability with a CVSS base score of 7.5 (HIGH). OpenVAS references corroborate a 'too long URL' condition aff...
CVE-2002-1082
The CVE-2002-1082 issue affects ezContents 1.40 and earlier, where the Image Upload capability allows remote attackers to cause ezContents to perform operations on local files as if they were uploaded. The vulnerability is network-exploitable with low attack complexity and no authentication requi...
CVE-2002-0882
CVE-2002-0882 affects Cisco IP Phone (VoIP) models 7910, 7940, and 7960. The vulnerability arises from handling large integer values in two script parameters: the stream ID of StreamingStatistics and the port ID of PortInformation. Exploitation can cause a remote DoS (reset) and may allow reading...
CVE-2002-1012
CVE-2002-1012 affects IBM Tivoli Management Framework (TMF) ManagedNode, specifically TMF 3.6.x through 3.7.1. It is a remote vulnerability: a crafted long HTTP GET request can trigger a buffer overflow in the web server, leading to denial of service or arbitrary code execution. The issue is docu...
CVE-2002-1086
The CVE-2002-1086 entry relates to multiple SQL injection vulnerabilities in ezContents 1.41 and earlier. The affected software is ezContents (versions up to 1.41). Underlying cause is input handling leading to SQL injection. The vulnerability is assessable as network-exploitable with no authenti...
CVE-2002-1018
The CVE-2002-1018 entry concerns the library feature of Adobe Content Server 3.0, which does not verify whether a customer has already checked out an eBook. This allows remote attackers to cause a denial of service (resource exhaustion) by repeatedly checking out the same book. The connected docu...
CVE-2002-0899
Falcon web server 2.0.0.1021 and earlier is vulnerable to an access-restrictions bypass for protected files when a URL’s directory portion ends with a dot. The flaw allows remote attackers to bypass access controls, potentially exposing protected content. The CVE record repeatedly states the affe...
CVE-2002-0896
The throttle capability in Swatch may fail to report certain events if 1 the same type of event occurs after the throttle period, or 2 when multiple events matching the same "watchfor" expression do not occur after the throttle period, which could allow attackers to avoid detection...
CVE-2002-1038
Double Choco Latte DCL before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the 1 Projects: Upload File Attachment or 2 Work Orders: Import features...
CVE-2002-0962
CVE-2002-0962 corresponds to a cross-site scripting vulnerability in GeekLog 1.3.5 and earlier. The connected Nessus entry links this CVE to GeekLog
CVE-2002-0907
CVE-2002-0907 affects SHOUTcast servers (notably 1.8.9 and other versions prior to 1.8.12). The issue is a buffer overflow triggered by a long value in a header starting with icy-, allowing a remote authenticated DJ to execute arbitrary code on the server. The available data do not describe explo...
CVE-2002-1072
CVE-2002-1072 affects ZyXEL Prestige devices (642R and Prestige 310) due to a vulnerability in handling oversized, fragmented ICMP packets (jolt style). The issue allows remote attackers to induce a denial of service. The available sources confirm affected models and the general impact (availabil...
CVE-2002-0951
The CVE-2002-0951 entry concerns a SQL injection vulnerability in Ruslan Builder. The underlying issue is an injection flaw in authentication via the username and password fields allowing remote attackers to obtain administrative privileges through a "'--" sequence. The available documents do not...
CVE-2002-0942
CVE-2002-0942 describes buffer overflows in Lugiment Log Explorer (pre-3.02). The vulnerability stems from vulnerable handling of long arguments to the extended stored procedures (xp_logattach_StartProf, xp_logattach_setport, xp_logattach), which can allow an attacker with database permissions to...
CVE-2002-1028
The CVE-2002-1028 incident affects the Oddsock Song Requester WinAmp plugin CGI programs, version 2.1. The issue is described as multiple buffer overflows that permit remote attackers to trigger a denial of service (crash) by supplying long arguments. The connected documents confirm the affected ...
CVE-2002-0993
HP Instant Support Enterprise Edition (ISEE) U2512A on HP-UX 11.00/11.11 has an unknown vulnerability allowing authenticated users to access restricted files. The available records identify the affected software and the access impact but do not provide technical details on root cause, vulnerable ...
CVE-2002-0963
CVE-2002-0963 describes a SQL injection in GeekLog 1.3.5 and earlier, occurring in comment.php via the pid parameter. This could allow remote attackers to obtain sensitive user information. The NVD notes a MEDIUM risk (CVSS v2: AV:N/AC:L/Au:N/C:P/I:N/A:N; base 5.0). Affected product/version and e...
CVE-2002-1009
Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the 1 "Name" or 2 "E-mail" parameters...
CVE-2002-0944
Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the 1 user-agent or 2 referrer, which are not filtered by the stats program...