Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: April 2002

12 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2002-0071
    40Plan

    Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attacke

    HighCVSS 7.5No exploitEPSS 33%

    microsoft · internet information serverApr 22, 2002

  • CVE-2002-0072
    37Monitor

    The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not prop

    MediumCVSS 5.0No exploitEPSS 56%

    microsoft · internet information serverApr 22, 2002

  • CVE-2002-0073
    37Monitor

    The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial

    MediumCVSS 5.0No exploitEPSS 56%

    microsoft · internet information serverApr 22, 2002

  • CVE-2002-0074
    40Plan

    Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attacke

    HighCVSS 7.5No exploitEPSS 33%

    microsoft · internet information serverApr 22, 2002

  • CVE-2002-0075
    40Plan

    Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary scrip

    HighCVSS 7.5No exploitEPSS 33%

    microsoft · internet information serverApr 22, 2002

  • CVE-2002-0079
    53Plan

    Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attac

    HighCVSS 7.5Proof of conceptEPSS 77%

    microsoft · internet information serverApr 22, 2002

  • CVE-2002-0147
    49Plan

    Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a

    HighCVSS 7.5No exploitEPSS 61%

    microsoft · internet information serverApr 22, 2002

  • CVE-2002-0148
    49Plan

    Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script

    HighCVSS 7.5Proof of conceptEPSS 64%

    microsoft · internet information serverApr 22, 2002

  • CVE-2002-0149
    49Plan

    Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibl

    HighCVSS 7.5No exploitEPSS 62%

    microsoft · internet information serverApr 22, 2002

  • CVE-2002-0150
    45Plan

    Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers an

    HighCVSS 7.5No exploitEPSS 49%

    microsoft · internet information serverApr 22, 2002

  • CVE-2002-0152
    35Monitor

    Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbi

    HighCVSS 7.5No exploitEPSS 17%

    microsoft · entourageApr 22, 2002

  • CVE-2002-0153
    35Monitor

    Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML e

    HighCVSS 7.5Proof of conceptEPSS 17%

    microsoft · ieApr 22, 2002