Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: October 2002

28 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2002-0696
    34Monitor

    Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual F

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · visual foxproOct 4, 2002

  • CVE-2002-0862
    32Monitor

    The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft produc

    MediumCVSS 6.8Proof of conceptEPSS 15%

    microsoft · windows 2000Oct 4, 2002

  • CVE-2002-0936
    28Monitor

    The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP

    MediumCVSS 5.0Proof of conceptEPSS 27%

    apache · tomcatOct 4, 2002

  • CVE-2002-0965
    51Plan

    Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrar

    HighCVSS 7.5WeaponizedEPSS 69%

    oracle · oracle9iOct 4, 2002

  • CVE-2002-1048
    34Monitor

    HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet services via an SNMP reque

    HighCVSS 7.5Proof of conceptEPSS 13%

    hp · jetdirectOct 4, 2002

  • CVE-2002-1059
    48Plan

    Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via

    HighCVSS 7.5WeaponizedEPSS 60%

    van dyke technologies · securecrtOct 4, 2002

  • CVE-2002-1076
    34Monitor

    Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP

    HighCVSS 7.5Proof of conceptEPSS 13%

    ipswitch · imailOct 4, 2002

  • CVE-2002-1077
    23Monitor

    IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request witho

    MediumCVSS 5.0Proof of conceptEPSS 10%

    ipswitch · imailOct 4, 2002

  • CVE-2002-1131
    38Monitor

    Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1)

    HighCVSS 7.5Proof of conceptEPSS 25%

    squirrelmail · squirrelmailOct 4, 2002

  • CVE-2002-0370
    43Plan

    Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code v

    HighCVSS 7.5No exploitEPSS 43%

    allume systems division · stuffit expanderOct 10, 2002

  • CVE-2002-0692
    35Monitor

    Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers t

    HighCVSS 7.5No exploitEPSS 18%

    microsoft · frontpage server extensionsOct 10, 2002

  • CVE-2002-0693
    39Monitor

    Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0

    HighCVSS 7.5Proof of conceptEPSS 31%

    microsoft · windows 2000Oct 10, 2002

  • CVE-2002-0694
    34Monitor

    The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000,

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · windows 2000Oct 10, 2002

  • CVE-2002-0840
    56Plan

    Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalNam

    MediumCVSS 6.8Proof of conceptEPSS 95%

    apache · http serverOct 11, 2002

  • CVE-2002-0843
    36Monitor

    Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a maliciou

    HighCVSS 7.5No exploitEPSS 21%

    apache · http serverOct 11, 2002

  • CVE-2002-0863
    27Monitor

    Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext sessi

    MediumCVSS 5.0No exploitEPSS 21%

    microsoft · .net windows serverOct 11, 2002

  • CVE-2002-0864
    25Monitor

    The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote

    MediumCVSS 5.0No exploitEPSS 16%

    microsoft · .net windows serverOct 11, 2002

  • CVE-2002-0865
    36Monitor

    A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.o

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · virtual machineOct 11, 2002

  • CVE-2002-0866
    42Plan

    Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and

    HighCVSS 7.5Proof of conceptEPSS 41%

    microsoft · virtual machineOct 11, 2002

  • CVE-2002-0867
    28Monitor

    Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet E

    MediumCVSS 5.0No exploitEPSS 27%

    microsoft · virtual machineOct 11, 2002

  • CVE-2002-1140
    24Monitor

    The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote atta

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · servicesOct 11, 2002

  • CVE-2002-1141
    24Monitor

    An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 200

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · servicesOct 11, 2002

  • CVE-2002-1148
    26Monitor

    The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read sou

    MediumCVSS 5.0Proof of conceptEPSS 18%

    apache · tomcatOct 11, 2002

  • CVE-2002-1156
    24Monitor

    Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI ena

    MediumCVSS 5.0No exploitEPSS 14%

    apache · http serverOct 11, 2002

  • CVE-2001-1451
    28Monitor

    Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, all

    MediumCVSS 5.0No exploitEPSS 27%

    microsoft · windows 2000Oct 22, 2002

  • CVE-2002-1179
    37Monitor

    Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code

    HighCVSS 7.5Proof of conceptEPSS 22%

    microsoft · outlook expressOct 28, 2002

  • CVE-2002-1214
    45Plan

    Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and pos

    HighCVSS 7.5WeaponizedEPSS 49%

    microsoft · windows 2000Oct 28, 2002

  • CVE-2002-1217
    45Plan

    Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute ar

    HighCVSS 7.5Proof of conceptEPSS 49%

    microsoft · internet explorerOct 28, 2002