Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2002

24 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2002-1604
    34Monitor

    Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environmen

    HighCVSS 7.5No exploitEPSS 14%

    hp · hp-uxSep 2, 2002

  • CVE-2002-1605
    34Monitor

    Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environm

    HighCVSS 7.5Proof of conceptEPSS 13%

    hp · hp-uxSep 2, 2002

  • CVE-2002-0654
    38Monitor

    Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a reques

    MediumCVSS 5.0Proof of conceptEPSS 58%

    apache · http serverSep 5, 2002

  • CVE-2002-0679
    47Plan

    Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitr

    CriticalCVSS 10.0No exploitEPSS 23%

    caldera · unixwareSep 5, 2002

  • CVE-2002-0721
    54Plan

    Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, w

    CriticalCVSS 10.0Proof of conceptEPSS 46%

    microsoft · data engineSep 5, 2002

  • CVE-2002-0857
    34Monitor

    Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to

    HighCVSS 7.5No exploitEPSS 13%

    oracle · database serverSep 5, 2002

  • CVE-2002-0859
    38Monitor

    Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary c

    HighCVSS 7.5Proof of conceptEPSS 26%

    microsoft · jetSep 5, 2002

  • CVE-2002-0647
    37Monitor

    Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allow

    HighCVSS 7.5Proof of conceptEPSS 23%

    microsoft · internet explorerSep 24, 2002

  • CVE-2002-0648
    35Monitor

    The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitra

    MediumCVSS 5.0Proof of conceptEPSS 48%

    microsoft · internet explorerSep 24, 2002

  • CVE-2002-0691
    34Monitor

    Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a l

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · internet explorerSep 24, 2002

  • CVE-2002-0722
    34Monitor

    Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to misrepresent the source of a file in the File Download dialogue bo

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · internet explorerSep 24, 2002

  • CVE-2002-0723
    35Monitor

    Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attacker

    HighCVSS 7.5Proof of conceptEPSS 15%

    microsoft · internet explorerSep 24, 2002

  • CVE-2002-0724
    38Monitor

    Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a den

    HighCVSS 7.5Proof of conceptEPSS 25%

    microsoft · windows 2000Sep 24, 2002

  • CVE-2002-0726
    35Monitor

    Buffer overflow in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to execute arbitrary code via

    HighCVSS 7.5No exploitEPSS 17%

    microsoft · tsac activex controlSep 24, 2002

  • CVE-2002-0727
    36Monitor

    The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, whi

    HighCVSS 7.5No exploitEPSS 18%

    microsoft · office web componentsSep 24, 2002

  • CVE-2002-0860
    26Monitor

    The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbi

    MediumCVSS 5.0No exploitEPSS 18%

    microsoft · office web componentsSep 24, 2002

  • CVE-2002-0861
    35Monitor

    Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · office web componentsSep 24, 2002

  • CVE-2002-0974
    24Monitor

    Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses upldd

    MediumCVSS 5.0Proof of conceptEPSS 14%

    microsoft · windows xpSep 24, 2002

  • CVE-2002-0975
    34Monitor

    Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitra

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · directx files viewer controlSep 24, 2002

  • CVE-2002-0976
    29Monitor

    Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet

    MediumCVSS 6.4Proof of conceptEPSS 14%

    microsoft · internet explorerSep 24, 2002

  • CVE-2002-0977
    33Monitor

    Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to execute arbitrary code via a

    HighCVSS 7.5No exploitEPSS 10%

    microsoft · file transfer managerSep 24, 2002

  • CVE-2002-0980
    38Monitor

    The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows

    HighCVSS 7.5Proof of conceptEPSS 26%

    microsoft · internet explorerSep 24, 2002

  • CVE-2002-1120
    50Plan

    Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

    HighCVSS 7.5WeaponizedEPSS 66%

    savant · savant web serverSep 24, 2002

  • CVE-2002-1123
    53Plan

    Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attacker

    HighCVSS 7.5WeaponizedEPSS 77%

    microsoft · data engineSep 24, 2002