CVE Notifier

CVE-2002-1038 CWE-? N/A

CVE-2002-1038

Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the (1) Projects: Upload File Attachment or (2)…

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1037 CWE-? N/A

CVE-2002-1037

Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the (1) Ticket# Find, (2) Priorities, (3) Severities, …

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1036 CWE-? N/A

CVE-2002-1036

Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote attackers to execute web script via the (1) Rank or (2) Match parameters.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1034 CWE-? N/A

CVE-2002-1034

none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argument.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1033 CWE-? N/A

CVE-2002-1033

Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via a "..:" sequence (dot-dot variant) in the argument.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1032 CWE-? N/A

CVE-2002-1032

Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1029 CWE-? N/A

CVE-2002-1029

Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service (crash) via a malformed request to TCP port 17990.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1028 CWE-? N/A

CVE-2002-1028

Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service (crash) via long arguments.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1027 CWE-? N/A

CVE-2002-1027

Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 500error.jsp with the s…

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1026 CWE-? N/A

CVE-2002-1026

Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly triggering a buffer overflow…

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1023 CWE-? N/A

CVE-2002-1023

BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1022 CWE-? N/A

CVE-2002-1022

BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.

MITRE n/a:n/a 31 Aug 2002