CVE Notifier

CVE-2002-0459 CWE-? N/A

CVE-2002-0459

Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0458 CWE-? N/A

CVE-2002-0458

Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0457 CWE-? N/A

CVE-2002-0457

Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as <, >, and & in fields such as (1) name, (2) email, (3) A…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0456 CWE-? N/A

CVE-2002-0456

Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from di…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0455 CWE-? N/A

CVE-2002-0455

IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0453 CWE-? N/A

CVE-2002-0453

The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting …

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0452 CWE-? N/A

CVE-2002-0452

Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulne…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0450 CWE-? N/A

CVE-2002-0450

Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0449 CWE-? N/A

CVE-2002-0449

Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long argument to webplus.exe program, which triggers the overflow in webpsvc.exe.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0448 CWE-? N/A

CVE-2002-0448

Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many "C:/" sequences.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0447 CWE-? N/A

CVE-2002-0447

Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in an HTTP GET request.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0446 CWE-? N/A

CVE-2002-0446

categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathname in an error messag…

MITRE n/a:n/a 11 Jun 2002