Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 79

Export CSV
CVE-2002-0009

security flaw

show_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu.

CVSS 2.0 · 5.0 Medium EPSS 1.2% KEV · Not listed
Vendors
Mozilla Redhat
Products
Bugzilla Powertools
CVE-2002-0010

security flaw

Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via (1) the sql parameter in buglist.cgi, (2) invalid field names from the "boolean chart" query in buglist.cgi, (3) the mybugslink parameter in userprefs.cgi, (4) a malformed bug ID in the buglist parameter in long_list.cgi, and (5) the value parameter in editusers.cgi, which allows groupset privileges to be modified by attackers with blessgroupset privileges.

CVSS 2.0 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Mozilla Redhat
Products
Bugzilla Powertools
CVE-2002-0011

security flaw

Information leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more easily conduct attacks on the login.

CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed
Vendors
Mozilla Redhat
Products
Bugzilla Powertools
CVE-2002-0012

security flaw

Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available.

CVSS 2.0 · 10.0 Critical EPSS 23.9% KEV · Not listed
Vendors
Redhat Snmp
Products
Linux Powertools Snmp
CVE-2002-0013

security flaw

Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available.

CVSS 2.0 · 10.0 Critical EPSS 50.8% KEV · Not listed
Vendors
Redhat Snmp
Products
Linux Powertools Snmp
CVE-2002-0043

security flaw

sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Redhat Todd Miller
Products
Linux Powertools Sudo
CVE-2002-0059

zlib: Double free in inflateEnd

The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data.

CVSS 3.1 · 9.8 Critical EPSS 9.7% KEV · Not listed
Vendors
Redhat Zlib
Products
Linux Powertools Zlib
CVE-2002-0177

security flaw

Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client.

CVSS 2.0 · 7.5 High EPSS 9.5% KEV · Not listed
Vendors
Icecast Redhat
Products
Icecast Powertools
CVE-2002-0166

security flaw

Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Redhat Stephen Turner
Products
Powertools Analog
CVE-2002-0170

security flaw

Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Redhat Zope
Products
Powertools Zope
CVE-2002-0184

security flaw

Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Debian Redhat Sudo Project
Products
Debian Linux Linux Powertools and 1 more
CVE-2002-0353

security flaw

The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, which causes Ethereal to allocate memory incorrectly, possibly due to zero-length fields.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Linux Powertools
CVE-2002-0388

security flaw

Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.

CVSS 2.0 · 7.5 High EPSS 6.3% KEV · Not listed
Vendors
Gnu Redhat
Products
Mailman Enterprise Linux Linux and 2 more
CVE-2002-0401

security flaw

SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer.

CVSS 3.1 · 7.5 High EPSS 5.5% KEV · Not listed
Vendors
Debian Ethereal Redhat
Products
Debian Linux Ethereal Linux and 1 more
CVE-2002-0402

security flaw

Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code while Ethereal is parsing keysyms.

CVSS 2.0 · 7.5 High EPSS 4.9% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux and 1 more
CVE-2002-0403

security flaw

DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet that causes Ethereal to enter an infinite loop.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux and 1 more