Total
29908 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2002-1760 | 1 Phprojekt | 1 Phprojekt | 2026-06-16 | 7.5 HIGH | N/A |
| Multiple SQL injection vulnerabilities in PHProjekt 2.0 through 3.1 allow remote attackers to execute arbitrary SQL commands via the unknown attack vectors. | |||||
| CVE-2002-1759 | 1 Phprojekt | 1 Phprojekt | 2026-06-16 | 5.0 MEDIUM | N/A |
| The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files. | |||||
| CVE-2002-1758 | 1 Phprojekt | 1 Phprojekt | 2026-06-16 | 5.0 MEDIUM | N/A |
| PHProjekt 2.0 through 3.1 allows remote attackers to view or modify data via requests to certain scripts that do not verify if the user is logged in. | |||||
| CVE-2002-1757 | 1 Phprojekt | 1 Phprojekt | 2026-06-16 | 7.5 HIGH | N/A |
| PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass authentication for scripts via a request to a .php file with "sms" in the URL, which is included in the PATH_INFO portion of the $PHP_SELF variable, as demonstrated using "mail_send.php/sms". | |||||
| CVE-2002-1756 | 1 Acd Systems | 1 Acdsee | 2026-06-16 | 5.0 MEDIUM | N/A |
| ACDSee 4.0 allows remote attackers to cause a denial of service (crash) via an .ais file with a long file description field, which is not properly handled when the file properties of the file are viewed. | |||||
| CVE-2002-1755 | 1 Tinc | 1 Tinc | 2026-06-16 | 5.0 MEDIUM | N/A |
| tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC. | |||||
| CVE-2002-1754 | 1 Novell | 1 Netware Client | 2026-06-16 | 2.1 LOW | N/A |
| Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service (crash) by using ping, traceroute, or a similar utility to force the client to resolve a large hostname. | |||||
| CVE-2002-1751 | 1 Cgiscript.net | 1 Cslivesupport | 2026-06-16 | 5.0 MEDIUM | N/A |
| csLiveSupport.cgi in CGIScript.net csLiveSupport allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function. | |||||
| CVE-2002-1749 | 1 Microsoft | 1 Windows 2000 | 2026-06-16 | 7.2 HIGH | N/A |
| Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the screen saver activates and the user disconnects, which could allow attackers to gain administrator privileges. | |||||
| CVE-2002-1748 | 1 Open Source Development Network | 1 Slashcode | 2026-06-16 | 7.2 HIGH | N/A |
| Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts. | |||||
| CVE-2002-1747 | 1 Maxim Krasnyansky | 1 Vtun | 2026-06-16 | 5.0 MEDIUM | N/A |
| Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB. | |||||
| CVE-2002-1746 | 1 Maxim Krasnyansky | 1 Vtun | 2026-06-16 | 5.0 MEDIUM | N/A |
| Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets. | |||||
| CVE-2002-1744 | 1 Microsoft | 1 Internet Information Services | 2026-06-16 | 5.0 MEDIUM | N/A |
| Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot). | |||||
| CVE-2002-1743 | 1 Mirabilis | 1 Icq | 2026-06-16 | 5.0 MEDIUM | N/A |
| AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file. | |||||
| CVE-2002-1742 | 1 Paul Kulchenko | 1 Soap Lite | 2026-06-16 | 5.0 MEDIUM | N/A |
| SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger. | |||||
| CVE-2002-1741 | 1 Alt-n | 1 Worldclient | 2026-06-16 | 7.2 HIGH | N/A |
| Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to delete arbitrary files via a ".." (dot dot) in the Attachments parameter. | |||||
| CVE-2002-1740 | 1 Alt-n | 2 Mdaemon, Worldclient | 2026-06-16 | 2.1 LOW | N/A |
| Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name (NewFolder parameter). | |||||
| CVE-2002-1738 | 1 Alt-n | 1 Mdaemon | 2026-06-16 | 5.0 MEDIUM | N/A |
| Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote attackers to send anonymous email. | |||||
| CVE-2002-1737 | 1 Astaro | 1 Security Linux | 2026-06-16 | 2.1 LOW | N/A |
| Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files. | |||||
| CVE-2002-1736 | 1 Markus Triska | 1 Cginews | 2026-06-16 | 5.0 MEDIUM | N/A |
| Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input." | |||||