Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: May 2002

20 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2002-1592
    24Monitor

    The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that

    MediumCVSS 5.0No exploitEPSS 12%

    apache · http serverMay 6, 2002

  • CVE-2002-0154
    37Monitor

    Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or

    HighCVSS 7.5No exploitEPSS 24%

    microsoft · sql serverMay 16, 2002

  • CVE-2002-0201
    26Monitor

    Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a

    MediumCVSS 5.0Proof of conceptEPSS 21%

    cyberstop · cyberstop web serverMay 16, 2002

  • CVE-2002-0224
    28Monitor

    The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through S

    MediumCVSS 5.0No exploitEPSS 26%

    microsoft · internet information servicesMay 16, 2002

  • CVE-2002-0228
    26Monitor

    Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as

    MediumCVSS 5.0No exploitEPSS 19%

    microsoft · msn messengerMay 16, 2002

  • CVE-2002-1056
    36Monitor

    Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editi

    HighCVSS 7.5No exploitEPSS 18%

    microsoft · outlookMay 16, 2002

  • CVE-2002-0033
    47Plan

    Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with

    CriticalCVSS 10.0Proof of conceptEPSS 23%

    sun · solarisMay 29, 2002

  • CVE-2002-0155
    37Monitor

    Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, all

    HighCVSS 7.5No exploitEPSS 24%

    microsoft · msn chat controlMay 29, 2002

  • CVE-2002-0188
    35Monitor

    Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type

    HighCVSS 7.5No exploitEPSS 16%

    microsoft · internet explorerMay 29, 2002

  • CVE-2002-0189
    34Monitor

    Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL

    HighCVSS 7.5Proof of conceptEPSS 13%

    microsoft · internet explorerMay 29, 2002

  • CVE-2002-0190
    37Monitor

    Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code under fewer security restrictions via a malf

    HighCVSS 7.5No exploitEPSS 24%

    microsoft · internet explorerMay 29, 2002

  • CVE-2002-0191
    29Monitor

    Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" character via script cont

    MediumCVSS 5.0Proof of conceptEPSS 28%

    microsoft · internet explorerMay 29, 2002

  • CVE-2002-0193
    40Plan

    Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type

    HighCVSS 7.5Proof of conceptEPSS 33%

    microsoft · internet explorerMay 29, 2002

  • CVE-2002-0242
    33Monitor

    Cross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to execute arbitrary script via an Extended HTML F

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · internet explorerMay 29, 2002

  • CVE-2002-0252
    33Monitor

    Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long

    HighCVSS 7.5Proof of conceptEPSS 10%

    apple · quicktimeMay 29, 2002

  • CVE-2002-0263
    34Monitor

    Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows remote attackers to execute arbitrary code via a long boundary value in a multip

    HighCVSS 7.5Proof of conceptEPSS 13%

    ezne.net · ezboard 2000May 29, 2002

  • CVE-2002-0269
    33Monitor

    Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · internet explorerMay 29, 2002

  • CVE-2002-0283
    29Monitor

    Windows XP with port 445 open allows remote attackers to cause a denial of service (CPU consumption) via a flood of TCP SYN packets containi

    MediumCVSS 5.0No exploitEPSS 28%

    microsoft · windows xpMay 31, 2002

  • CVE-2002-0285
    34Monitor

    Outlook Express 5.5 and 6.0 on Windows treats a carriage return ("CR") in a message header as if it were a valid carriage return/line feed c

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · outlook expressMay 31, 2002

  • CVE-2002-0289
    24Monitor

    Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP re

    MediumCVSS 5.0Proof of conceptEPSS 12%

    bbshareware.com · phusion webserverMay 31, 2002