Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: July 2002

30 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2002-0186
    47Plan

    Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data querie

    HighCVSS 7.5Proof of conceptEPSS 55%

    microsoft · sql serverJul 3, 2002

  • CVE-2002-0187
    34Monitor

    Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via t

    HighCVSS 7.5Proof of conceptEPSS 13%

    microsoft · sql serverJul 3, 2002

  • CVE-2002-0364
    39Monitor

    Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing

    HighCVSS 7.5No exploitEPSS 31%

    microsoft · internet information serverJul 3, 2002

  • CVE-2002-0371
    46Plan

    Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attacke

    HighCVSS 7.5Proof of conceptEPSS 54%

    microsoft · internet explorerJul 3, 2002

  • CVE-2002-0372
    34Monitor

    Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's (IE

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · windows media playerJul 3, 2002

  • CVE-2002-0392
    58Plan

    Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrar

    HighCVSS 7.5WeaponizedEPSS 94%

    apache · http serverJul 3, 2002

  • CVE-2002-0540
    36Monitor

    Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and mod

    HighCVSS 7.5Proof of conceptEPSS 19%

    nortel · cvx 1800 multi-service access switchJul 3, 2002

  • CVE-2002-0559
    34Monitor

    Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or e

    HighCVSS 7.5No exploitEPSS 13%

    oracle · application serverJul 3, 2002

  • CVE-2002-0563
    35Monitor

    The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authent

    MediumCVSS 5.0No exploitEPSS 51%

    oracle · application serverJul 3, 2002

  • CVE-2002-0568
    31Monitor

    Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information i

    LowCVSS 2.1No exploitEPSS 75%

    oracle · application serverJul 3, 2002

  • CVE-2002-0569
    36Monitor

    Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL

    HighCVSS 7.5No exploitEPSS 18%

    oracle · application serverJul 3, 2002

  • CVE-2002-0620
    24Monitor

    Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrar

    MediumCVSS 5.0No exploitEPSS 12%

    microsoft · commerce serverJul 3, 2002

  • CVE-2002-0621
    25Monitor

    Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause

    MediumCVSS 5.0No exploitEPSS 16%

    microsoft · commerce serverJul 3, 2002

  • CVE-2002-0622
    36Monitor

    The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · commerce serverJul 3, 2002

  • CVE-2002-0623
    36Monitor

    Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · commerce serverJul 3, 2002

  • CVE-2002-0639
    44Plan

    Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentica

    CriticalCVSS 9.8No exploitEPSS 18%

    openbsd · opensshJul 3, 2002

  • CVE-2002-0640
    48Plan

    Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses du

    CriticalCVSS 10.0Proof of conceptEPSS 27%

    openbsd · opensshJul 3, 2002

  • CVE-2002-0651
    34Monitor

    Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to

    HighCVSS 7.5No exploitEPSS 13%

    isc · bindJul 3, 2002

  • CVE-2002-0665
    43Plan

    Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL.

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    macromedia · jrunJul 11, 2002

  • CVE-2002-0624
    37Monitor

    Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000,

    HighCVSS 7.5Proof of conceptEPSS 22%

    microsoft · msdeJul 23, 2002

  • CVE-2002-0641
    33Monitor

    Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows att

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · msdeJul 23, 2002

  • CVE-2002-0642
    43Plan

    The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop

    HighCVSS 7.2No exploitEPSS 49%

    microsoft · msdeJul 23, 2002

  • CVE-2002-0682
    34Monitor

    Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL w

    HighCVSS 7.5Proof of conceptEPSS 13%

    apache · tomcatJul 23, 2002

  • CVE-2002-0369
    47Plan

    Buffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service (restart) and possibly execute arbitrary code

    CriticalCVSS 10.0No exploitEPSS 24%

    microsoft · .net frameworkJul 26, 2002

  • CVE-2002-0409
    28Monitor

    orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote at

    MediumCVSS 5.0No exploitEPSS 28%

    microsoft · .net frameworkJul 26, 2002

  • CVE-2002-0436
    44Plan

    sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    sun · solarisJul 26, 2002

  • CVE-2002-0444
    34Monitor

    Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incom

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · windows 2000 terminal servicesJul 26, 2002

  • CVE-2002-0448
    24Monitor

    Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many

    MediumCVSS 5.0Proof of conceptEPSS 14%

    xerver · xerverJul 26, 2002

  • CVE-2002-0702
    49Plan

    Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUP

    CriticalCVSS 10.0Proof of conceptEPSS 31%

    isc · dhcpdJul 26, 2002

  • CVE-2002-0717
    33Monitor

    PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with c

    HighCVSS 7.5No exploitEPSS 11%

    php · phpJul 26, 2002