Vulnerabilities (CVE)

Total 369376 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-1764 1 Adobe 1 Acrobat Reader 2026-06-16 2.1 LOW N/A
acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVE-2002-1763 1 Sun 1 Sunos 2026-06-16 4.6 MEDIUM N/A
The dtscreen Sun Solaris 8 CDE screensaver crashes when the "Shift" and "Return" keys are pressed repeatedly and quickly, which allows local users to access the current session.
CVE-2002-1762 1 Microsoft 1 Baseline Security Analyzer 2026-06-16 5.0 MEDIUM N/A
Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java.
CVE-2002-1761 1 Phprojekt 1 Phprojekt 2026-06-16 5.0 MEDIUM N/A
Directory traversal vulnerability in PHProjekt 2.0 through 3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences.
CVE-2002-1760 1 Phprojekt 1 Phprojekt 2026-06-16 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in PHProjekt 2.0 through 3.1 allow remote attackers to execute arbitrary SQL commands via the unknown attack vectors.
CVE-2002-1759 1 Phprojekt 1 Phprojekt 2026-06-16 5.0 MEDIUM N/A
The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.
CVE-2002-1758 1 Phprojekt 1 Phprojekt 2026-06-16 5.0 MEDIUM N/A
PHProjekt 2.0 through 3.1 allows remote attackers to view or modify data via requests to certain scripts that do not verify if the user is logged in.
CVE-2002-1757 1 Phprojekt 1 Phprojekt 2026-06-16 7.5 HIGH N/A
PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass authentication for scripts via a request to a .php file with "sms" in the URL, which is included in the PATH_INFO portion of the $PHP_SELF variable, as demonstrated using "mail_send.php/sms".
CVE-2002-1756 1 Acd Systems 1 Acdsee 2026-06-16 5.0 MEDIUM N/A
ACDSee 4.0 allows remote attackers to cause a denial of service (crash) via an .ais file with a long file description field, which is not properly handled when the file properties of the file are viewed.
CVE-2002-1755 1 Tinc 1 Tinc 2026-06-16 5.0 MEDIUM N/A
tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC.
CVE-2002-1754 1 Novell 1 Netware Client 2026-06-16 2.1 LOW N/A
Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service (crash) by using ping, traceroute, or a similar utility to force the client to resolve a large hostname.
CVE-2002-1753 1 Cgiscript 1 Csnews Professional 2026-06-16 7.5 HIGH N/A
csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
CVE-2002-1752 1 Cgiscript 1 Cschat-r-box 2026-06-16 7.5 HIGH N/A
csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
CVE-2002-1751 1 Cgiscript.net 1 Cslivesupport 2026-06-16 5.0 MEDIUM N/A
csLiveSupport.cgi in CGIScript.net csLiveSupport allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
CVE-2002-1750 1 Cgiscript 1 Csguestbook 2026-06-16 7.5 HIGH N/A
csGuestbook.cgi in CGISCRIPT.NET csGuestbook 1.0 allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
CVE-2002-1749 1 Microsoft 1 Windows 2000 2026-06-16 7.2 HIGH N/A
Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the screen saver activates and the user disconnects, which could allow attackers to gain administrator privileges.
CVE-2002-1748 1 Open Source Development Network 1 Slashcode 2026-06-16 7.2 HIGH N/A
Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts.
CVE-2002-1747 1 Maxim Krasnyansky 1 Vtun 2026-06-16 5.0 MEDIUM N/A
Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB.
CVE-2002-1746 1 Maxim Krasnyansky 1 Vtun 2026-06-16 5.0 MEDIUM N/A
Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets.
CVE-2002-1745 1 Microsoft 1 Internet Information Services 2026-06-16 5.0 MEDIUM 7.5 HIGH
Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.