Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: February 2002

5 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2001-1371
    34Monitor

    The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by defaul

    HighCVSS 7.5No exploitEPSS 12%

    oracle · application serverFeb 6, 2002

  • CVE-2002-0012
    47Plan

    Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1

    CriticalCVSS 10.0No exploitEPSS 23%

    snmp · snmpFeb 13, 2002

  • CVE-2002-0013
    55Plan

    Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service

    CriticalCVSS 10.0Proof of conceptEPSS 50%

    snmp · snmpFeb 13, 2002

  • CVE-2002-1603
    24Monitor

    GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (e

    MediumCVSS 5.0Proof of conceptEPSS 13%

    goahead software · goahead webserverFeb 13, 2002

  • CVE-2002-0048
    50Plan

    Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote a

    CriticalCVSS 10.0Proof of conceptEPSS 34%

    andrew tridgell · rsyncFeb 27, 2002