Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 79

Export CSV
CVE-2002-0687

security flaw

The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Vendors
Redhat Zope
Products
Powertools Zope
CVE-2002-0688

security flaw

ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Redhat Zope
Products
Powertools Zope
CVE-2002-0803

security flaw

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi.

CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed
Vendors
Mozilla Redhat
Products
Bugzilla Powertools
CVE-2002-0804

security flaw

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Mozilla Redhat
Products
Bugzilla Powertools
CVE-2002-0805

security flaw

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writable permissions, and (2) creates the params file with world-writable permissions, which allows local users to modify the files and execute code.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Bugzilla Powertools
CVE-2002-0806

security flaw

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other users by directly calling the editusers.cgi script with the "del" option.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Bugzilla Powertools
CVE-2002-0807

security flaw

Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name (real name) field, which is not properly quoted by editusers.cgi.

CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Mozilla Redhat
Products
Bugzilla Powertools
CVE-2002-0808

security flaw

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset permissions to be assigned to some bugs.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Bugzilla Powertools
CVE-2002-0809

security flaw

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generated by some browsers, which could cause certain fields to appear to be unset, which has the effect of removing group permissions on bugs when buglist.cgi is provided with the encoded field names.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Bugzilla Powertools
CVE-2002-0810

security flaw

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails.

CVSS 2.0 · 5.0 Medium EPSS 1.2% KEV · Not listed
Vendors
Mozilla Redhat
Products
Bugzilla Powertools
CVE-2002-0811

security flaw

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via a SQL injection attack on the sort order parameter to buglist.cgi.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Mozilla Redhat
Products
Bugzilla Powertools
CVE-2002-0821

security flaw

Buffer overflows in Ethereal 0.9.4 and earlier allow remote attackers to cause a denial of service or execute arbitrary code via (1) the BGP dissector, or (2) the WCP dissector.

CVSS 2.0 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux and 1 more
CVE-2002-0822

security flaw

Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the (1) SOCKS, (2) RSVP, (3) AFS, or (4) LMP dissectors, which can be caused to core dump.

CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux and 1 more
CVE-2002-0834

security flaw

Buffer overflow in the ISIS dissector for Ethereal 0.9.5 and earlier allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets.

CVSS 2.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux and 1 more
CVE-2002-0838

security flaw

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.

CVSS 2.0 · 4.6 Medium EPSS 2.0% KEV · Not listed
Vendors
Ggv Ghostview Gv and 1 more
Products
Ggv Ghostview Gv and 3 more
CVE-2002-0855

security flaw

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature.

CVSS 2.0 · 7.5 High EPSS 6.1% KEV · Not listed
Vendors
Gnu Redhat
Products
Mailman Enterprise Linux Linux and 2 more
CVE-2002-1154

security flaw

anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log.

CVSS 2.0 · 5.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat Stephen Turner
Products
Powertools Analog